Dodgy email ???

[porpoise]

I received this:
Dear user of Ntlworld.com,
We warn you about some attacks on your e-mail account. Your computer may
contain viruses, in order to keep your computer and e-mail account safe,
please, follow the instructions.
For details see the attached file.
Attached file is protected with the password for security reasons. Password is *****
Best wishes,
The Ntlworld.com team http://www.ntlworld.com (http://www.ntlworld.com/)

The thing is, my Norton Antivirus deleted the attached file as it was infected with the W32.Beagle@mm!zip virus !!!! should I report it to someone or is it ok ?

[Chris]

I received this:
Dear user of Ntlworld.com,
We warn you about some attacks on your e-mail account. Your computer may
contain viruses, in order to keep your computer and e-mail account safe,
please, follow the instructions.
For details see the attached file.
Attached file is protected with the password for security reasons. Password is *****
Best wishes,
The Ntlworld.com team http://www.ntlworld.com (http://www.ntlworld.com/)

The thing is, my Norton Antivirus deleted the attached file as it was infected with the W32.Beagle@mm!zip virus !!!! should I report it to someone or is it ok ?
This is dodgy as hell. If the 'from' address is from ntl, then it has been spoofed. It wouldn't do any harm to alert the abuse team about it though, seeing as it has obviously been deliberately written as if it's 'from' ntl. abuse@ntlworld.com AFAIK.

[porpoise]

Thanks that what I thought but wasn't sure who to advise.

[threadbare]

smacks of the beagle virus

[Enterian]

I suspect the abuse team will be sick of hearing about this, there's loads of them about, had one myself. Norton deleted the attachment, I deleted the email!


They password protect the .zip file in an attempt to prevent virus scanners from scanning it, however Norton released an update to circumvent that so full marks for keeping your virus scanner up to date! ;)

[Chris W]

This is a virus, there are 1000000s of them going round at the moment, ntl know about them, so i wouldn't really say it was worth bothering with.

Also, if you do want to report it the abuse@ntlworld.com address is no longer in use, you need to fill in the form here: http://www.ntlworld.com/netreport/

[Neil]

http://www.cableforum.co.uk/board/showthread.php?t=8779