sangiro 4 #1 March 3, 2004 Heya all, If you get an email that seems to come from Dropzone.com like the one below, please delete it without opening the email or the attachment: QuoteDear user of Dropzone.com, Your e-mail account will be disabled because of improper using in next three days, if you are still wishing to use it, please, resign your account information. Advanced details can be found in attached file. For security purposes the attached file is password protected. Password is "81328". Cheers, The Dropzone.com team http://www.dropzone.com The attachment (in my case called Documents.zip) contains the Win32.Beagle.J@mm virus. This email did not originate on the Dropzone.com servers nor did it come from our "team". There are a lot of pretty nasty viruses going around. Make sure your anti-virus software and definition files are up to date. Oh yes, and your account is not going to be disabled either. Safe swoops Sangiro Quote Share this post Link to post Share on other sites
Michele 1 #2 March 3, 2004 Thanks, HH. We got a notice like that on my office email, too. Nasty virii going around....sigh... Ciels- Michele ~Do Angels keep the dreams we seek While our hearts lie bleeding?~ Quote Share this post Link to post Share on other sites
flyangel2 2 #3 March 3, 2004 Michele, I got one in my home e-mail as well. I didn't do anything with it yet, since I was heading out the door to work. Thanks HH, I'll be sure to get rid of that nasty little bug once I get back home. Now, how did they know to list my lanminds account on the e-mail, and your company on your e-mail and the dropzone.com account on that one? Funny, the same password on the e-mail from HH as the one I have at home.May your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey Quote Share this post Link to post Share on other sites
Michele 1 #4 March 3, 2004 I'm confused. You got one from my office with the dz stuff? Ciels- Michele ~Do Angels keep the dreams we seek While our hearts lie bleeding?~ Quote Share this post Link to post Share on other sites
flyangel2 2 #5 March 3, 2004 Poor baby, you really are out of it the last few days. No, I got an e-mail from my internet provider at my home e-mail saying that my account would be shut down for two days because of some kind of upgrade. Didn't really read the whole thing, but there is a password that I need to use to redirect my mail. The password and the wording on my e-mail is the same as the one that HH posted. All but the name of the e-mail account. Nothing from your work. It's all good.May your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey Quote Share this post Link to post Share on other sites
PhillyKev 0 #6 March 3, 2004 QuoteOh yes, and your account is not going to be disabled either. So we can break forum rules and insult greenies without fear of reprisal?? MUHAHAHAHAHAHAHA! Quote Share this post Link to post Share on other sites
Michele 1 #7 March 3, 2004 Quote Poor baby, you really are out of it the last few days. Why, yes, yes I have been. Thanks for the clarification. I was scratching my head trying to figure it out, but computer stuff is simply beyond me...even on my "bright" days. Ciels- Michele ~Do Angels keep the dreams we seek While our hearts lie bleeding?~ Quote Share this post Link to post Share on other sites
kansasskydiver 0 #8 March 3, 2004 i got it last night at like 2am. scanned it and played around with it and nothing. it's Qaurantined at the momment. Norton has some steps on it, but no removal tool yet<--- See look, pink dolphins DO exist! Quote Share this post Link to post Share on other sites
Shell666 0 #9 March 3, 2004 I got the same thing here at the University of Alberta from the "Ualberta.ca Team" ... same password too ...'Shell Quote Share this post Link to post Share on other sites
Snowwhite 0 #10 March 3, 2004 Some of the WFFC team have gotten it too, except from freefall.com, same password also. Thanks for the heads upskydiveTaylorville.org [email protected] Quote Share this post Link to post Share on other sites
skymama 35 #11 March 4, 2004 QuoteSo we can break forum rules and insult greenies without fear of reprisal?? MUHAHAHAHAHAHAHA! Go ahead. But then we'll go around the country and give your name and phone number to every stripper we can find. She is Da Man, and you better not mess with Da Man, because she will lay some keepdown on you faster than, well, really fast. ~Billvon Quote Share this post Link to post Share on other sites
LouDiamond 1 #12 March 4, 2004 QuoteQuoteSo we can break forum rules and insult greenies without fear of reprisal?? MUHAHAHAHAHAHAHA! Go ahead. But then we'll go around the country and give your name and phone number to every stripper we can find. Or better yet, we will give your e-mail address up for all the Pro Bush campaign web sites and news letters"It's just skydiving..additional drama is not required" Some people dream about flying, I live my dream SKYMONKEY PUBLISHING Quote Share this post Link to post Share on other sites
JeffD 0 #13 March 4, 2004 Well how about this? I keep getting returned email that I never sent out which I think someone is using my email as a return email. I have the IP address from the email but I cant figure out how to trace where its coming from. Quote Share this post Link to post Share on other sites
RevJim 0 #14 March 4, 2004 Got one of those from my "Charter.net" address today. It contained a .zip file. I scanned the file, and it came back clean (it beat the virus updates). I still didn't run it. Instead I looked at the headers and saw it was mailed from a yahoo address (though that was probably spoofed too) and came from a non-existant ip address. So, I instead forwarded the entire email, headers in a text file, to [email protected]. I got a VERY quick return "Thank You" email. About 20 minutes later I had a virus def file update come through.... Just doin' my part! It's your life, live it! Karma RB#684 "Corcho", ASK#60, Muff#3520, NCB#398, NHDZ#4, C-33989, DG#1 Quote Share this post Link to post Share on other sites
skysprite 0 #15 March 4, 2004 More info here http://securityresponse.symantec.com/avcenter/venc/data/[email protected]~skysprite Quote Share this post Link to post Share on other sites
souleh 0 #16 March 4, 2004 Find out what ISP the IP belongs to. Go to command prompt: Start -> run: In Windows 9x type 'command' and press enter In Windows NT/XP type 'cmd' and press enter Type 'ping' followed by a space, then the IP as it appears in the header. Ping.exe will try and resolve the host. Eg (made up): dyn12-153-16-98.dsl.optonline.net The domain is 'optonline.net'. ppp15-3-167-4.dialup.tiscali.co.uk The domain is 'tiscali.co.uk'. Then take this address, add abuse@ to the front, and fire off an email, explaining the situation, including one or more example emails with all headers. They should be able to stop the user / terminate / suspend their account.. either way, it's worth a try! Nick. 'buttplugs? where?' - geno Quote Share this post Link to post Share on other sites
Remster 24 #17 March 4, 2004 QuoteQuoteSo we can break forum rules and insult greenies without fear of reprisal?? MUHAHAHAHAHAHAHA! Go ahead. But then we'll go around the country and give your name and phone number to every stripper we can find. That was very stupid Andrea. I'm not really surprised... (will that get my name and number to strippers????? lol)Remster Quote Share this post Link to post Share on other sites
skymama 35 #18 March 4, 2004 Quote(will that get my name and number to strippers????? lol) I'm not sure strippers like hairy man-boobies. She is Da Man, and you better not mess with Da Man, because she will lay some keepdown on you faster than, well, really fast. ~Billvon Quote Share this post Link to post Share on other sites
flyangel2 2 #19 March 4, 2004 QuoteQuote(will that get my name and number to strippers????? lol) I'm not sure strippers like hairy man-boobies. Oh no! We got hairy man boobs in this thread too? BTW, I received yet another e-mail with my account at home this morning. Did a virus scan, and I'm still cleanMay your trails be crooked, winding, lonesome, dangerous, leading to the most amazing view. May your mountains rise into and above the clouds. - Edward Abbey Quote Share this post Link to post Share on other sites
billymotox 0 #20 March 4, 2004 Hey, I just got a notice that said the same thing but from "team yahoo". What a bunch of crap. Also I have been getting return mail notices for mail I have never sent. (viruses) I wish I could choke these S.O.B.'s who try to screw up our accounts billy d------------------------- "Escape may be checked by water and land, but the air and the sky are free." (from the story of Daedalus and Icarus) Quote Share this post Link to post Share on other sites
champu 1 #21 March 5, 2004 someone apparently wrote a simple version of this worm and since then we've been seeing all kinds of different variations on it. The only real difference being what efforts the author has gone through to make the e-mail look authentic to get you to click the attatchment. The attatchment is always some executable file with an extension that most people wouldn't recognize to be executable (pif, scr, com) or a zip file that contains such a file. If you don't click the attatched file (which would run the program) you can simply delete the e-mail and be just fine. With this latest rendition, I actually had a decent chuckle when I got e-mails from the "teams" of the two domains for which I'm the sole operator. I wish I had a team, it would certainly make my life easier Quote Share this post Link to post Share on other sites
Andrewwhyte 1 #22 March 5, 2004 Thanx for the warning. I got that email from Yahoo today. Word is there's a war going on right now with competitive worms attacking each other over the ability to use your email account (and computer) as a spam platform. Quote Share this post Link to post Share on other sites
Pammi 0 #23 March 5, 2004 I had the same problem with Dropzonejewelry.com email. I was thinking it was from my host at first, but it was signed the Dropzonejewelry.com team. What?! The team is me and Merrick! LOL! Thanks for the heads up! Pammi Quote Share this post Link to post Share on other sites
EDYDO 0 #24 March 6, 2004 QuoteWell how about this? I keep getting returned email that I never sent out which I think someone is using my email as a return email. I have the IP address from the email but I cant figure out how to trace where its coming from. Me too!!! Plus a lot more. I changed my email address to stop it and am more careful where I post the correct address. Ed Quote Share this post Link to post Share on other sites
