Virus threat?

mrgreenjeans · Apr 8, 2004

I just received a suspect email informing me that my bank accounts have been closed and I am being charged with fraud, however the spelling is suspect and the attachment unzipped to a MSdos( type .pif) file I immediately deleted. The original message got through my server's spam blocker and passed Symantec's virus detection. I checked a couple of detection sites and there was no mention of this email specifically. I thought I'd put the word out just in case.

Anybody else seen this out there?

I didn't know where to put this thread so thought this the most appropriate.

su root · Apr 9, 2004

This one?

From: (spoofed) Brian Spencer [mailto:[email protected]]
Subject: fraud report
Message body:

Dear Sir!

We are sorry to report that your bank account has been
temporarily closed cause of explicit fraud activity. We are about
to report to the police about this incident and they.ll carefully
investigate this matter. If you.ll be found guilty, your can be
charged up to $57,183.
You can find all the details about this incident in the attached
file and if you still have any questions until the police start
investigation, please contact us as soon as possible. Sir, fraud
activity is prohibited by the US legislation and you must note down
that from now on your every step is being carefully traced down.
So if you don.t want any other incidents to take place, wait for
the end of this investigation or contact us. You can find our email
and phone number in the attached file(password - MarH3Jl4).

Faithfully yours, Brian Spencer (Chief Manager)

Attachment: www.fdic.com.fraud.security.pif.zip

That's "Trojan.Download.Berbew"
http://securityresponse.symantec.com/avcenter/venc/data/trojan.download.berbew.html

RZA · Apr 9, 2004

Definitely bull****. IMHO, most banks don't even know/use your email at all... and NEVER will they send you a .pif.

mrgreenjeans · Apr 9, 2004

Yep that's it. I was surprised to see it get through multiple virus detection programs and thought I'd give a heads up. Thanks for the clarification.

fadirocks · Apr 9, 2004

i got few viruses on my yahoo account
paypal 41kb
something else 24kb
older viruses 99-102kb

pif , scr, exe, zip, and I also saw some rar files

I'm getting really sick of viruses wait I'm sick right now I have FLU stupid virus

mrgreenjeans · Apr 9, 2004

Norton found the file after it was unzipped, not before. According to their site, it's a low level threat.

Virus threat?

mrgreenjeans

Member

su root

Senior Member, --, I teach people how to read your

RZA

Member

mrgreenjeans

Member

fadirocks

Member

mrgreenjeans

Member

Similar threads