ATTENTION!!! New virus..PayPal

[newmousecateer]

We just received this from our MIS department. I know a lot of you use PayPal and will think it is ligit:

There is a new e-mail virus spreading today. It appears to be from paypal and talks about your account needing to be updated. It asks you to run a program to update your personal information. This attachment is a virus that if run will ask for credit card numbers and will mass e-mail itself to everyone in your address book. Any e-mails of this nature should be deleted

 

[aunt lissa]

Thanks for letting us know!!

 

[Melora]

We just had something happen that we couldn't link to a virus, but we got one of those fake emails from ebay asking us "to sign in with our password".. Do we look THAT stupid? Dh forwarded it to ebay but somehow the email caused our ebay selling page to have a sign in page at the bottom that when right clicked was obviously not from ebay and had no security certifictate. On the top of the page it also said sign in.. even though all of our information was already displayed..on a REAL selling page it will say SIGN OUT at the top....We tried to get live on line help via ebay but the ding dong who was chatting with me just couldnt seem to get what I was telling her.. she kept asking if we would sign in..I kept telling her we would NOT sign in because we couldnt get a secure sign in page. Finally DH went and changed our password and the page that was currently displayed as our selling page suddenly couldnt load. Somehow this email accessed something in our computer and caused this page to be displayed even when we turned the computer off and restarted. When we chaged our password it couldn't work anymore.

We also got one of those nasty virus (accidently forwarded to us by someone we knew) that mass emailed our customers end of auction annoucements for items they didnt buy. We have since gotten a much improved virus scanning software.

But that ebay message thing was WEIRD.

 

[Dodie]

I got that e-mail yesterday, supposedly from PayPal, and thought to myself, "How stupid would you have to be to respond to something like this and provide your credit card information?!!!"

Then again, I suppose that they DO manage to catch enough people off guard that they get the information they are looking for. These folks are pretty savvy. This particular e-mail looked "suspicious," but I have seen the eBAY ones that look just like an eBAY message.

 

[newmousecateer]

"How stupid would you have to be to respond to something like this and provide your credit card information?!!!"

I'm not sure....I guess you would have to ask the honest, unsuspecting people who unfortunately DID respond to it.....

 

[Dan Murphy]

http://msnbc.com/news/993772.asp

 

[SandraM]

Yeah, I got a really stupid e-mail on one of my computers, that purported to be from Norton anti-virus; as it happens, the computer that the message appears on does not use Norton. A little box appeared asking me to confirm little details THAT ANY REAL COMPANY WOULD ALREADY HAVE, including credit card number. I was so tempted to give my details as a VERY RUDE PHRASE that you wouldn't repeat in front of your children!
But I was lazy, so I X'd it.

 

[C.Ann]

I got an email the other day from someone posing as an authority figure at AOL indicating that I had been reported for "on-line abuse" and I needed to click on this "link" to rectify the matter immediately or my account would be suspended...

Okey - dokey.. I forwarded it right off to AOL and haven't heard a peep since..

Have to admit that's a new one that I hadn't heard of, but since I've become so heavily involved with eBay (and Papal) I guard all my info like a pit bull!!

 

[Dan Murphy]

From one of my anti-virus softwares............

- Panda Software warns users of the new Mimail.I worm -
Virus Alerts, by Panda Software (http://www.pandasoftware.com)

Madrid, November 14, 2003 - PandaLabs has detected a new variant, of the
Mimail worm (W32/Mimail.I.worm). This variant, like its predecessors, is
designed to spread rapidly in e-mail messages that use so-called social
engineering techniques to trick users and infect their computers. In this
particular case, the message refers to the PAYPAL payment system.

Mimail.I arrives in an e-mail with the subject: YOUR PAYPAL.COM ACCOUNT
EXPIRES, while the message text tells users that they should update their
PAYPAL account as it is about to expire. Full details of the text are
available at Panda Software's Virus Encyclopedia, at
http://www.pandasoftware.com/virus_info/encyclopedia/.

The attachment that accompanies the message is called either w w
w.paypal.com.scr or paypal.asp.scr. If the user runs the file, Mimail.I
searches the computer for e-mail addresses in all files on the computer with
extensions other than: COM, WAV, CAB, PDF, RAR, ZIP, TIF, PSD, OCX, VXD,
MP3, MPG, AVI, DLL, EXE, GIF, JPG and BMP. These addresses are stored in a
file called el388.tmp. The worm then uses its own SMTP engine to send itself
to these addresses, without the user being aware of what's happening.

Mimail.I generates other files (EE98AF.TMP and SVCHOST32.EXE) in the
computer, which are really copies of the worm itself.

Finally, creates a Windows registry entry in order to ensure it is run every
time the system is started up.

Mimail.I is the latest in a string of variants that have appeared over the
last few weeks. It would therefore seem that the author or authors of these
viruses want to spread as many worms as possible in order to increase the
probability of a computer being hit by a variant of Mimail.

Due to the possibility of being infected by this variant, Panda Software
advises users to treat all e-mails received with caution, and to update
their antivirus solutions if they haven't already done so. The company has
already made the updates to its products available to users to ensure their
solutions can detect and eliminate Mimail.I. Similarly, users can also
detect and disinfect this and other malicious code using the free, online
antivirus, Panda ActiveScan, which is available on the company's website at
http://www.pandasoftware.com

Detailed technical information on Mimail.I is available from Panda
Software's Virus Encyclopedia, at
http://www.pandasoftware.com/virus_info/encyclopedia/.