X Nations - !!warning!!

X Nations (http://www.xnations.com/index.php)

- General Webmaster Business and Discussions (http://www.xnations.com/forumdisplay.php?f=2)

- - !!warning!! (http://www.xnations.com/showthread.php?t=4223)

There is a very broadbased attack going on today against windows computers. I recieved 3 emails from admin@pervotheclown.com telling me my email address was about to expire and saying I should check the enclosed email for details. The attached file is called message.zip and contains a file called message.html If you open that file your computer can be compromised and code can be run on it. Delete ANY emails from admin@anydomainwhereyouhaveemail.com immediately and go to windowsupdate.com and install the critical updates and service packs.

This thing isn't picked up by virus scanners so anybody that thinks an html file is safe is at risk.

:badcomp:

1.) Never open an email, especially not with an attachement, from someone you don't know!

2.) Try to make your friends using some characteristica... I for myself write at the and of a letter, email, sms always "TQM Stephan" --> Do not add this to an automatically added signature!!!

3.) Personally on my system webdocuments are by default opened in a text editor (EditPlus)

4.) Thx for the warning Mister X!

It looks like this is actually a worm of some sort. It's called the MiMail virus it seems. here's some stuff about it from MSNBC:

Quote:

“I WOULD LIKE to inform you about important information regarding your email address. This e-mail address will be expiring. Please read attachment for details,” claims the e-mail, which has been dubbed “MiMail” by antivirus companies. It is particularly believable because it appears to come from the local network’s system administrator. Copies received by MSNBC.com, for example, came from “admin@msnbc.com.”
If a recipient clicks on the attached file, the virus inserts a small program on the victim’s machines that scans all files to compile a list of e-mail addresses, according to Network Associates Inc. These are then stored in a file called “eml.tmp” on the victim’s computer, perhaps for later retrieval.
Network Associates spokesman Vincent Gullotto said the virus may have gotten its initial kick-start because it was initially sent out in a spam mailing.
MiMail spread quickly. Trend Micro said about it had cataloged about 1,000 infections from U.S. customers, including some Fortune 100 customers by Friday afternoon.
“That’s pretty good for the opening hours of the game,” said David Perry, Trend Micro spokesman.
E-mail lists devoted to computer security were abuzz with reports of the virus.
William Shepherd, AntiVirus Administrator at the International Truck and Engine Corporation, said his office was getting slammed by copies of the virus.
“I received a notice from Trend (an antivirus firm) about 1 1/2 hours ago and I’ve already had to block 50 e-mails,” he said.
But Vincent Weafer, senior research director for Symantec Corp., said he was optimistic the virus outbreak would fade away quickly after its initial flare-up.
“I don’t think it’s going to go very far,” he said. Spam-initiated computer viruses often end up as “one-shot deals,” he said.

Looks like it might not be too serious but don't take any chances. Update your antivirus software and get any updates available at windowsupdate.com. My Norton detected the virus after I updated it.

Thanks for the heads up!

<img src="http://www.adultisubmit4u.com/Smile/smiley_thumbsup.gif" width="49" height="32">

<img src="http://www.adultisubmit4u.com/Smile/upsidedown.gif" width="15" height="15">

Quote:

Originally posted by Panky
Thanks for the heads up!

<img src="http://www.adultisubmit4u.com/Smile/smiley_thumbsup.gif" width="49" height="32">

<img src="http://www.adultisubmit4u.com/Smile/upsidedown.gif" width="15" height="15">

You're welcome! :D

This is a pretty sneaky one and I got it 4 different times. If it wasn't for the fact that it was from admin@pervotheclown.com I might have fallen for it. But I'm the admin, hehehe. I know of several people that got it on their isp email and they were fooled by it.