WARNING! Virus pretending to be from PBW

[geoschmo]

If you get an email with an attachment called message.zip DO NOT OPEN IT. You may receieve it pretending to be from from admin@pbw.cc saying something about your account expiring. This is NOT from PBW. This is a person trying to spead a virus.

Geoschmo

[ August 11, 2003, 16:13: Message edited by: geoschmo ]

[Atrocities]

Originally posted by geoschmo:
If you get an email with an attachment called message.zip DO NOT OPEN IT. You may receieve it pretending to be from from admin@pbw.cc saying something about your account expiring. This is NOT from PBW. This is a person trying to spead a virus.

Geoschmo<font size="2" face="Verdana, Helvetica, sans-serif">We should avoid Posts on this and ask that it be stickyed to the top of the forum for the time being.

That was fast!

[ August 11, 2003, 16:15: Message edited by: Atrocities ]

[mottlee]

Too late! not JUST PBW! ANY with that attachment! bugger to get rid of! http://forum.shrapnelgames.com/images/icons/icon9.gif

[Krsqk]

I got that, but not from PBW. Did it have "agfahakh" in the subject or the body?

Good thing I edited the .html instead of opening it. http://forum.shrapnelgames.com/images/icons/shock.gif

[geoschmo]

Originally posted by Krsqk:
I got that, but not from PBW. Did it have "agfahakh" in the subject or the body?

Good thing I edited the .html instead of opening it. http://forum.shrapnelgames.com/images/icons/shock.gif <font size="2" face="Verdana, Helvetica, sans-serif">The couple I saw had letters in the subject like that, but different letters. Likly what happened is someone with the admin email address in their mailbox got infected and it's hiding it's origin.

Geoschmo

[Captain Blood]

I got one, but it sent from an admin@ on the e-mail site I use. Luckily I don't trust attachments that have little explantation. Whoever that Bugger is he's pissed me off though. http://forum.shrapnelgames.com/images/icons/icon8.gif Anyway a warning that it might come from a source that seems to be your e-mail admin.

[ August 11, 2003, 22:30: Message edited by: Captain Blood ]

[Ragnarok]

Originally posted by Captain Blood:
I got one, but it sent from an admin@ on the e-mail site I use. Luckily I don't trust attachments that have little explantation. Whoever that Bugger is he's pissed me off though. http://forum.shrapnelgames.com/images/icons/icon8.gif Anyway a warning that it might come from a source that seems to be your e-mail admin.<font size="2" face="Verdana, Helvetica, sans-serif">Confirmed. I had 2 come in the other day and Ididn't open them because I didn't believe that I was getting something from the Admins as Yahoo. They both just had some mumbled letters for the subject then it was from admin@yahoo. But they are safely in the deleted box now. This must be going around as our exchange server at work is being affected by some kind of virus that we can't figure out how it got in in the first place. We'll get it though. Nasty little bug shutting out email system down. http://forum.shrapnelgames.com/images/icons/icon8.gif

[Baron Grazic]

The Virus is called "Mimail.A".
The Subject usually says "Your Account" followed by strange letters but variations will appear.
The Sender is usually "admin@your_domain"

Most virus checkers should have a patch to detect this virus by now, so I would suggest updating your virus checkers.

Our work has had this virus almost 100 times in the past 2 days, but our MailSweeper has stopped all instances of it.

Edit - For more details, check out the following link http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=100523

[ August 12, 2003, 00:10: Message edited by: Baron Grazic ]