Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Status
Not open for further replies.

Emrtr4

macrumors regular
Original poster
Feb 6, 2006
186
0
Okay, I know that you have all heard of that virus over Ichat back in the early part of 2006.

I just recieved an Email from supposidly Apple Service and support.

It gives you an attachment and tells you that you have a virus and to download this file. When you download it, it is the same Ichat Jpeg from the old Worm from the early part of 2006.

It was from

<secur@mac.com>
and the subject was Mail Server Report

This was the file name it wanted me to download

Update-KB2800-x86.exe


Let me copy the message

_________________
Mail server report.

Our firewall determined the e-mails containing worm copies are being sent from your computer.

Nowadays it happens from many computers, because this is a new virus type (Network Worms).


Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses

Please install updates for worm elimination and your computer restoring.

Best regards,
Customers support service

_________________

I saved the file but DID NOT click on it. When I saw that it was the now famous Ichat.jpg image I immediatly removed it.

I also recieved a second email from this account

john.green@mail.com>

The attachment was named-
test.elm.pif

The message was as follows-


The message contains Unicode characters and has been sent
as a binary attachment.

___________________

I believe that both of these are a virus/ worm targeting PowerPC OSX computers. DO not open them.

This if the FIRSt I have heard of virus's being sent to .mac accounts!

All Mac users be on the lookout
 
Emrtr4 said:
Okay, I know that you have all heard of that virus over Ichat back in the early part of 2006.

I just recieved an Email from supposidly Apple Service and support.

It gives you an attachment and tells you that you have a virus and to download this file. When you download it, it is the same Ichat Jpeg from the old Worm from the early part of 2006.

Let me copy the message

_________________
Mail server report.

Our firewall determined the e-mails containing worm copies are being sent from your computer.

Nowadays it happens from many computers, because this is a new virus type (Network Worms).


Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses

Please install updates for worm elimination and your computer restoring.

Best regards,
Customers support service

Sounds like a very bad phishing attempt. No virus here sorry.
 
And Paypal just sent me an email with a link asking me to confirm my account info :rolleyes:

Edit: Looks more like a spoof, note the poor use of english. Not sure if .Mac has a virus scan, but I would think it would.
 
If it was phiising wouldnt it have asked me to visit a website?

All it did was ask me to download an attachment.

Sorry, I am a newbie on this site, and luckily a newbie when it comes to virus's

this is my first experience with anything of this nature, even though I have been using computers for about my entire life.
 
Hmm a .exe and a .pif file. There's something bugging me about that. I don't know what, but something just doesn't seem right... like.. maybe... oh ya those kind of programs only work on windows...
 
Emrtr4 said:
If it was phiising wouldnt it have asked me to visit a website?

All it did was ask me to download an attachment.

Sorry, I am a newbie on this site, and luckily a newbie when it comes to virus's

this is my first experience with anything of this nature, even though I have been using computers for about my entire life.

They're both Windows-only files. Neither work on a Mac.
 
TBi said:
Hmm a .exe and a .pif file. There's something bugging me about that. I don't know what, but something just doesn't seem right... like.. maybe... oh ya those kind of programs only work on windows...

shows you how much I know, lol.

I will change the title of the thread then, so as not to scare people.

Thank you for the info.
 
Hehe... good job you didnt recieve the 'Ivory Coast help us live in [insert country here] and we will pay you $12.5m' email because you would of fallen for that too. :D

It probably is a phishing attempt but it will only work on a PC and an idiot. It just happens to have a .mac address. ;)
 
Emrtr4 said:
shows you how much I know, lol.

I will change the title of the thread then, so as not to scare people.

Thank you for the info.

Well might be better in future to do a little more research before posting threads like this...
 
Status
Not open for further replies.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.