[Merged] EMail "Virus" from ntl

[highlandlassie]

Morning everyone - new here so hope I have posted in the correct thread

Hi - I received an email from noreply@ntlworld.com - with an attachmnet and subject heading - warning you have a virus on your computer. I was in 2 minds on whether to open or not - deleted the email - but to be safe incase the email was genuine - I phoned tech dept - they advised that it was a virus, and they don't send emails with attachments - just curious if anyone else has received this type of email.

Before i phoned - i ran the following - trend micro, Nortons, adaware, spybot S&D, spyblaster - also have mailwasher - all came up clean

Good Morning welcome to Nthellworld.
I personally have not received any such email, but where I work we have been getting a lot of reports of it.

I dont think its sepcific to NTL, I am certain the address will be spoofed.

The good part of it is that you were switched on enough to realise th epossible dangers and took appropriate action.

[rdhw]

Originally Posted by highlandlassie

Hi - I received an email from noreply@ntlworld.com - with an attachmnet and subject heading - warning you have a virus on your computer.

This is a virus worm: bagle.j. It will be detected by NAI's 4332 DAT file when it is released.

[highlandlassie]

Originally Posted by rdhw

This is a virus worm: bagle.j. It will be detected by NAI's 4332 DAT file when it is released.

deleted anyway - thank goodness for mailwasher - thanks for your replies

[LynneC]

I got an email from ntlworld this morning, saying there had been complaints from some people about the spam emanating from my account. I was a tad surprised, since I'm very careful to protect my computer from invasion, but I have been away and perhaps the children had let something through.
The attachment was password protected. I opened it. (oh dear!)
The worm bagel was in the attachment. Since I was suspicious the first thing I did after opening the thing was to update and run my antivirus (something I do at least once a day). It cleaned out the problem. I'll goto Trend and check that everything has gone after this.
So beware - don't open the exe file ntl sends you! I've sent a copy of the email to support at ntl. Is there anywhere else I should send it?

I'll gaurantee you the email wasnt from NTL.
Seems this virus is being spread through spoofing email address's. We have been getting hit with it at work, looks like your mates/colleagues are sending you a file or something and its the virus.

Originally Posted by LynneC

I got an email from ntlworld this morning, saying there had been complaints from some people about the spam emanating from my account. I was a tad surprised, since I'm very careful to protect my computer from invasion, but I have been away and perhaps the children had let something through.
The attachment was password protected. I opened it. (oh dear!)
The worm bagel was in the attachment. Since I was suspicious the first thing I did after opening the thing was to update and run my antivirus (something I do at least once a day). It cleaned out the problem. I'll goto Trend and check that everything has gone after this.
So beware - don't open the exe file ntl sends you! I've sent a copy of the email to support at ntl. Is there anywhere else I should send it?

This virus was not sent by NTL. It is spoofing the NTL address to make it apear that way.

Have a look at this thread - http://forum.nthellworld.co.uk/showt...088#post157088#

Oh and to the site BTW

[threadbare]

ntl are most certainly not sending this

the email address is spoofed

don't send it anywhere!

[Alanmelon]

Just wondered - what was the nature of the exe, and what did it propose to do?
I think it's very unlikely this came from ntl. Its fair to say - you've been 'ad.

[br3ach]

Dont open attachments unless they are something from a known address that you were expecting to recieve.

No probs.

And as said above, the email is unlikely to have originated from NTL. You can post the headers of the email here, and we'll see if we can figure where it came from.

Good luck getting rid off it

Originally Posted by Kedoo

Dont open attachments unless they are something from a known address that you were expecting to recieve.

No probs.

And as said above, the email is unlikely to have originated from NTL. You can post the headers of the email here, and we'll see if we can figure where it came from.

Good luck getting rid off it

OK ok guys I think we have now firmly established the fact NTL did not send this lol.

What I would like to know now is, Can the true sender be established form the email header?

[br3ach]

Possibly. Post the headers here, and we'll see....

Duplicate Thread !

http://forum.nthellworld.co.uk/showthread.php?t=8779

[Stuart C]

Originally Posted by timewarrior2001

I dont think its sepcific to NTL, I am certain the address will be spoofed.

It's not specific to NTL. I work for a Uni. We have been getting similar warnings from management@ac.uk or support@ac.uk. These are not valid email addresses. If anyone here is a Student or works for any kind of educational establishment, do not open emails from these addresses (or any @ac.uk address).

[zovat]

Originally Posted by scastle

It's not specific to NTL. I work for a Uni. We have been getting similar warnings from management@ac.uk or support@ac.uk. These are not valid email addresses. If anyone here is a Student or works for any kind of educational establishment, do not open emails from these addresses (or any @ac.uk address).

Bagle.J is spreading quite nicely now - latest version is states that you will have you mail account disabled in 3 days and you must resign (sic) for the account. Attachment is quite nasty...

the attachment is even password protected, and the unlock code is in the mail body..

Neat variation huh... (I have linux and unix boxes, so enjoy looking at these )