Computing.Net > Forums > Security and Virus > scam or not???anyone tell me pls!!!

Computer Problems? Computing.Net has over 1,000,000 posts about all things technology related! Over 90% answered within 24 hours! Click here to start participating now! Also, be sure to check out the New User Guide.

scam or not???anyone tell me pls!!!

Reply to Message Icon

Name: luckyrelic
Date: March 19, 2004 at 15:41:24 Pacific
OS: windows 98
CPU/Ram: 64mb
Comment:

does anyone know if yahoo administration send you email warnings in your email account coz i received one today and the subject says: E-mail account disabling warning.. and the message contains:

Hello user of Yahoo.com e-mail server,

Our antivirus software has detected a large ammount of viruses
outgoing
from your email account, you may use our free anti-virus tool to
clean up
your computer software.

Advanced details can be found in attached file.

Sincerely,
The Yahoo.com team

and theres attachment included: Information.pif
and it came from: staff@yahoo.com

so anyone knows if this is a scam coz i dont send email viruses so anyone help me pls...




Sponsored Link
Ads by Google

Response Number 1
Name: JohnO
Date: March 19, 2004 at 15:48:23 Pacific
Reply:

My neighbor was using Yahoo mail, and he told me about a month ago that he had received an email from them telling him that his outgoing mail was infected. Didn't see the message, so can't say it was the same. My brother got an email from Road Runner cable telling him the same thing a while back. I'd guess it's authentic. Have you run a few uptodate AV programs? Don't rely on one. Go on the web and try Housecalls as well as Panda. Make sure your AV is up to date and run it also. If you don't have an AV program, I'd recommend you get one.


0

Response Number 2
Name: capt
Date: March 19, 2004 at 15:50:51 Pacific
Reply:

It is a virus packet! do not open it, immediately delete it!


0

Response Number 3
Name: capt
Date: March 19, 2004 at 15:55:59 Pacific
Reply:

The scam is when you receive an email from "the yahoo team" or whoever your email service provider is, that states that your email service will be terminated unless you provide additional/updated personal information to update your account. Take care and all the best!


0

Response Number 4
Name: Abnormal
Date: March 19, 2004 at 16:07:48 Pacific
Reply:

It's the bagal or begal crap, new versions
will infect non updated windows without
an attachmemt also.

Delete,Delete till you have nothing left
to delete.


0

Response Number 5
Name: Dog
Date: March 19, 2004 at 16:12:45 Pacific
Reply:

It is a pif file. It is definitely a virus!!!
Get rid of it immediately.

It works for me

D4


0

Related Posts

See More



Response Number 6
Name: Tank863
Date: March 19, 2004 at 16:21:13 Pacific
Reply:

Win32.Netsky.K is a worm that spreads through e-mail utilizing its own SMTP engine. The worm arrives as an attachment, 27,648 bytes in size and encrypted with tElock.

Method of Installation
When executed the worm copies itself to the %Windows% directory as avpguard.exe and adds a value to the registry to run on the next system boot:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\My AV = "%Windows%\avpguard.exe -av serv


Note: '%Windows%' is a variable location. The trojan determines the location of the current Windows folder by querying the operating system. The default installation location for the Windows directory for Windows 2000 and NT is C:\Winnt; for 95,98 and ME is C:\Windows; and for XP is C:\Windows.

It also creates a mutex called "SkYnEt_AVP", in order to avoid running multiple copies of itself.


Method of Distribution
Via E-mail

The worm sends itself through e-mail using its own SMTP engine. The worm attempts to use the local system's DNS server to resolve the mail server address of each targeted e-mail account. If it cannot use this DNS server, it will go through a list of 23 IP addresses stored inside its own code.

The worm arives as an attachment in an e-mail message.

The possible attachment names are:

website_<string>.pif
your_product_<string>.pif
letter_<string>.pif
archive<string>.pif
your_text<string>.pif
bill_<string>.pif
your_details<string>.pif
<string>_details.pif
<string>_document_word.pif
<string>_document_excel.pif
<string>_my_details.pif
<string>_all_document.pif
<string>_application.pif
mp3music_<string>.pif
yours<string>.pif
document_<string>4351.pif
<string>_picture.pif
<string>_file.pif
<string>_message_details.pif
yourpicture<string>.pif
<string>_document_full.pif
<string>_your_message_part2.pif
<string>information.pif
<string>document.pif
<string>_your_document.pif

Where <string> is extracted from the generated victim's e-mail address and represents the string before the "@" symbol.

The subject of the e-mail is one of the following:

Hi
Your product
Your letter
Re: corrected homework
Re: I've found your document
Re: Your bill
Re: hello again
Re: hi again
Re: part 3
Re: important document part 2
Re: important
Re: Your data
Re: Your application
Re: your music
Re: excel document
Re: Re: Re: word document
Re: Your details
Re: My details
Re: Your requested file
Re: Read it immediately
Re: Approved
Re: Your software
Re: my memberlist
Re: Your document
Re: Your file
Re: Your important document
www.<string>.tripod.com
Hi Mr. <string>
Moi <string>
He <string>
Yours faithfully, <string>
Message to <string>
Hi Mrs. <string>
Is <string>.doc yours?
Is <string>.xls yours?
Whats up <string>
www.paypal.com/<string>
<string>
Na <string>
Best <string>
Love <string>
Good morning <string>
Have a good day <string>
Dear <string>
To <string> , it's me
Welcome <string>
Moin <string>
Hello <string>
Your account <string> is expired!
Hey <string>
Hi <string>
www.<string>.freepage.com, your website
Hi <string>, your product
Hello <string>, your letter
Re: Hi <string>, your archive
Re: <string>, your text
Re: Hello <string>, your bill
Re: Hi <string>, your details
Re: Hello <string>, my details
Re: Hi <string>, your word file
Re: Hello <string>, your excel file
Re: Hi <string>, details
Re: Hello <string>, Approved
Re: Hello <string>, your software
Re: Hi <string>, your music
Re: Dear <string>, Here
Re: Re: Re: Hello <string>, your document
Re: Hi <string>
Re: Dear <string>, Hi
Re: Re: Hi <string>, your message
Re: Here <string>, your picture
Re: Hi <string>, here is the document
Re: Hello <string>, your document
Re: <string>, thanks!
Re: Re: <string>, thanks!
Re: Re: Hi <string>, document
Re: Hello <string>, document


Where <string> is extracted from the generated victim's e-mail address and represents the string before the "@" symbol

The body of the e-mail is one of the following:

My details are in the attached file.
I have corrected your document.
Please do not forget to read the important document.
I have an interesting document about you.
The sample is attached.
Your personal document is attached.
Your file is attached to this mail.
Note that I have attached your file.
The important document is attached.
Please read the document. It's important.
Your document is attached to this mail.
See the attachment for further details.
Your file is attached. Use this password for the file: <number>.
Please read the attached file. Password for the file is <number>.
Please have a look at the attached file. Password for decrypting is <number>.
See the attached file for details. Password is <number>.
Here is the file. My password is <number>.
Your document is attached. Your password is <number>.

Note: <number> is a randomly generated number between 0 and 32767, e.g. "324", or "16962".

Read Article: www3.ca.com

Tank863


0

Response Number 7
Name: JohnO
Date: March 19, 2004 at 17:25:38 Pacific
Reply:

I'll have to check with my neighbor and brother and see if those turned out to be viruses.


0

Response Number 8
Name: dcogsof4
Date: March 19, 2004 at 19:37:53 Pacific
Reply:

If it has an attachment, it is definitely a virus. When I first log on to my yahoo email account, it has been having messages right there saying if you get an attachment from yahoo administration, NOT to open it, as it is a virus. I have gotten several of them and I do not open any of them, I delete them. Yahoo only sends text emails, and that is rare for them to do that.

Dianna


0

Response Number 9
Name: davesqr
Date: March 20, 2004 at 06:46:11 Pacific
Reply:

I recieved something similar from yahoo telling me they have recieved complaints from other users about spam comming from my account, and it had an attachment, I emailed yahoo to ask if they had really sent me that email and they said theres a virus going around that disguises itself as official-looking emails that begin with a bunch of names including "administration". I was suspicious since the original email was in my bulk mail folder. So ya, what you got was a virus.


0

Response Number 10
Name: wawadave
Date: March 20, 2004 at 19:54:15 Pacific
Reply:

yes its a virus!

••• Resistance is invigorating! •••kill spyware


0

Response Number 11
Name: luckyrelic
Date: March 21, 2004 at 09:15:57 Pacific
Reply:

thnx everyone for the info..... by the way, i opened the message but didnt download the attachment, so am i infected?? if infected, how will i know that the virus is in and how do i remove the virus?? by the way, i always receive about 20 spam messages a day, so how do i get rid of this spam messages????


0

Sponsored Link
Ads by Google
Reply to Message Icon

strange bios page removing VBS/Psyme virus



Post Locked

This post is quite old and has been locked from receiving new replies. Please create a new posting instead.


Go to Security and Virus Forum Home


Sponsored links

Ads by Google


Results for: scam or not???anyone tell me pls!!!

msbb...virus or not? www.computing.net/answers/security/msbbvirus-or-not/5698.html

can anyone help me? www.computing.net/answers/security/can-anyone-help-me/1360.html

W32: Vibpack .... virus or not? www.computing.net/answers/security/w32-vibpack-virus-or-not/16683.html