Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
does anyone know if yahoo administration send you email warnings in your email account coz i received one today and the subject says: E-mail account disabling warning.. and the message contains:
Hello user of Yahoo.com e-mail server,
Our antivirus software has detected a large ammount of viruses
outgoing
from your email account, you may use our free anti-virus tool to
clean up
your computer software.Advanced details can be found in attached file.
Sincerely,
The Yahoo.com teamand theres attachment included: Information.pif
and it came from: staff@yahoo.comso anyone knows if this is a scam coz i dont send email viruses so anyone help me pls...

My neighbor was using Yahoo mail, and he told me about a month ago that he had received an email from them telling him that his outgoing mail was infected. Didn't see the message, so can't say it was the same. My brother got an email from Road Runner cable telling him the same thing a while back. I'd guess it's authentic. Have you run a few uptodate AV programs? Don't rely on one. Go on the web and try Housecalls as well as Panda. Make sure your AV is up to date and run it also. If you don't have an AV program, I'd recommend you get one.

The scam is when you receive an email from "the yahoo team" or whoever your email service provider is, that states that your email service will be terminated unless you provide additional/updated personal information to update your account. Take care and all the best!

It's the bagal or begal crap, new versions
will infect non updated windows without
an attachmemt also.Delete,Delete till you have nothing left
to delete.

Win32.Netsky.K is a worm that spreads through e-mail utilizing its own SMTP engine. The worm arrives as an attachment, 27,648 bytes in size and encrypted with tElock.
Method of Installation
When executed the worm copies itself to the %Windows% directory as avpguard.exe and adds a value to the registry to run on the next system boot:HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My AV = "%Windows%\avpguard.exe -av serv
Note: '%Windows%' is a variable location. The trojan determines the location of the current Windows folder by querying the operating system. The default installation location for the Windows directory for Windows 2000 and NT is C:\Winnt; for 95,98 and ME is C:\Windows; and for XP is C:\Windows.It also creates a mutex called "SkYnEt_AVP", in order to avoid running multiple copies of itself.
Method of Distribution
Via E-mailThe worm sends itself through e-mail using its own SMTP engine. The worm attempts to use the local system's DNS server to resolve the mail server address of each targeted e-mail account. If it cannot use this DNS server, it will go through a list of 23 IP addresses stored inside its own code.
The worm arives as an attachment in an e-mail message.
The possible attachment names are:
website_<string>.pif
your_product_<string>.pif
letter_<string>.pif
archive<string>.pif
your_text<string>.pif
bill_<string>.pif
your_details<string>.pif
<string>_details.pif
<string>_document_word.pif
<string>_document_excel.pif
<string>_my_details.pif
<string>_all_document.pif
<string>_application.pif
mp3music_<string>.pif
yours<string>.pif
document_<string>4351.pif
<string>_picture.pif
<string>_file.pif
<string>_message_details.pif
yourpicture<string>.pif
<string>_document_full.pif
<string>_your_message_part2.pif
<string>information.pif
<string>document.pif
<string>_your_document.pifWhere <string> is extracted from the generated victim's e-mail address and represents the string before the "@" symbol.
The subject of the e-mail is one of the following:
Hi
Your product
Your letter
Re: corrected homework
Re: I've found your document
Re: Your bill
Re: hello again
Re: hi again
Re: part 3
Re: important document part 2
Re: important
Re: Your data
Re: Your application
Re: your music
Re: excel document
Re: Re: Re: word document
Re: Your details
Re: My details
Re: Your requested file
Re: Read it immediately
Re: Approved
Re: Your software
Re: my memberlist
Re: Your document
Re: Your file
Re: Your important document
www.<string>.tripod.com
Hi Mr. <string>
Moi <string>
He <string>
Yours faithfully, <string>
Message to <string>
Hi Mrs. <string>
Is <string>.doc yours?
Is <string>.xls yours?
Whats up <string>
www.paypal.com/<string>
<string>
Na <string>
Best <string>
Love <string>
Good morning <string>
Have a good day <string>
Dear <string>
To <string> , it's me
Welcome <string>
Moin <string>
Hello <string>
Your account <string> is expired!
Hey <string>
Hi <string>
www.<string>.freepage.com, your website
Hi <string>, your product
Hello <string>, your letter
Re: Hi <string>, your archive
Re: <string>, your text
Re: Hello <string>, your bill
Re: Hi <string>, your details
Re: Hello <string>, my details
Re: Hi <string>, your word file
Re: Hello <string>, your excel file
Re: Hi <string>, details
Re: Hello <string>, Approved
Re: Hello <string>, your software
Re: Hi <string>, your music
Re: Dear <string>, Here
Re: Re: Re: Hello <string>, your document
Re: Hi <string>
Re: Dear <string>, Hi
Re: Re: Hi <string>, your message
Re: Here <string>, your picture
Re: Hi <string>, here is the document
Re: Hello <string>, your document
Re: <string>, thanks!
Re: Re: <string>, thanks!
Re: Re: Hi <string>, document
Re: Hello <string>, document
Where <string> is extracted from the generated victim's e-mail address and represents the string before the "@" symbolThe body of the e-mail is one of the following:
My details are in the attached file.
I have corrected your document.
Please do not forget to read the important document.
I have an interesting document about you.
The sample is attached.
Your personal document is attached.
Your file is attached to this mail.
Note that I have attached your file.
The important document is attached.
Please read the document. It's important.
Your document is attached to this mail.
See the attachment for further details.
Your file is attached. Use this password for the file: <number>.
Please read the attached file. Password for the file is <number>.
Please have a look at the attached file. Password for decrypting is <number>.
See the attached file for details. Password is <number>.
Here is the file. My password is <number>.
Your document is attached. Your password is <number>.Note: <number> is a randomly generated number between 0 and 32767, e.g. "324", or "16962".
Read Article: www3.ca.com
Tank863

If it has an attachment, it is definitely a virus. When I first log on to my yahoo email account, it has been having messages right there saying if you get an attachment from yahoo administration, NOT to open it, as it is a virus. I have gotten several of them and I do not open any of them, I delete them. Yahoo only sends text emails, and that is rare for them to do that.
Dianna

I recieved something similar from yahoo telling me they have recieved complaints from other users about spam comming from my account, and it had an attachment, I emailed yahoo to ask if they had really sent me that email and they said theres a virus going around that disguises itself as official-looking emails that begin with a bunch of names including "administration". I was suspicious since the original email was in my bulk mail folder. So ya, what you got was a virus.

thnx everyone for the info..... by the way, i opened the message but didnt download the attachment, so am i infected?? if infected, how will i know that the virus is in and how do i remove the virus?? by the way, i always receive about 20 spam messages a day, so how do i get rid of this spam messages????

![]() |
strange bios page
|
removing VBS/Psyme virus
|

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.
| Ads by Google |