Warning! Malicious Criminal Virus Planter Misusing this NG.
This is NO JOKE; recently I stupidly posted an email address in this forum
asking for help. The email address I used was new and was only used in this
newsgroup, so I KNOW that this is the source. I SOON thereafter got an
email that I received three or four times in my personal inbox, it had at
least two VIRUSES hidden in a so called...
.."you've received a greeting from a family member!"
Supposedly from:
postcards1001 [postcards@postcards1001.com] .it was NOT from them!
The full header revealed the following:
Return-Path: SRS0=hXwL=VZ=rodan.virtbiz.com=anonymous@srs.perfo ra.net
And:
Received: from [204.155.158.11] (helo=rodan.virtbiz.com)
by mx.perfora.net with ESMTP (Nemesis),
id 0MKuxu-1DvRiR3aKk-0003bD for _____________
This email contained several viruses! One of which is--
Backdoor.IRC.Zapchast --which allows outside access and control of your
computer. Several full virus scans exposed several dozen infected files;
this is very difficult to clean up! This stuff can be hidden under a
variety of disguises so watch out. Make your security settings at the
HIGHEST for awhile-- you are all at risk. There was at least one other
malicious email sent by the same criminal(s) --it hid under the guise of:
From: Bank Of America Cust.Dept. [mailto:noreply@bankofamerica.com]
Subject: Security Risk (Update Request )
Its header revealed this:
Return-Path: SRS0=Uh9f=VZ=members-service.de=webmaster@srs.perfora.net
Received: from mout.perfora.net (217.160.230.40)
by mxip11a.cluster1.charter.net with ESMTP; (date Month) 2005 (time)
X-IronPort-AV: i="3.93,307,1115006400";
d="scan'208"; a="1331910316:sNHT19673660"
Received: from [212.78.206.19] (helo=mcore.webc.lyceu.net)
by mx.perfora.net with ESMTP (Nemesis),
id 0MKvAI-1Dvb9l2f5I-0003pa for _______________
The REAL Bank of America has CONFIRMED that this is a fraudulent malicious
email; they are also working on this.
If any other people posting to this Newsgroup are experiencing similar
malicious attacks --I think they should post notice here; so we will all
know what we are dealing with (and maybe the scale). I have been in contact
with various authorities including those at the FEDERAL level; and they are
now monitoring my incoming traffic. Another thing that just started is--
incoming Malware intrusion attemts (hundreds of them) ! It is important
that we stop this sort of terrible thing. I believe that with all the
brilliant minds the modders and other techies have-- a collective solution
can be found; or at least some good security recommendations and guidelines.
Let's fix this and get these criminals off this (and other) Newsgroups.
Be more careful out there!
I'm Pissed Off,
noSpam
noSpam@netscape.com
Warning! Malicious Criminal Virus Planter Misusing this NG.
Linear Mode
