No .Mac Virus (ignore my thread please)

Discussion in 'Mac Basics and Help' started by Emrtr4, Sep 11, 2006.

Thread Status:
Not open for further replies.
  1. Emrtr4 macrumors regular

    Joined:
    Feb 6, 2006
    #1
    Okay, I know that you have all heard of that virus over Ichat back in the early part of 2006.

    I just recieved an Email from supposidly Apple Service and support.

    It gives you an attachment and tells you that you have a virus and to download this file. When you download it, it is the same Ichat Jpeg from the old Worm from the early part of 2006.

    It was from

    <secur@mac.com>
    and the subject was Mail Server Report

    This was the file name it wanted me to download

    Update-KB2800-x86.exe


    Let me copy the message

    _________________
    Mail server report.

    Our firewall determined the e-mails containing worm copies are being sent from your computer.

    Nowadays it happens from many computers, because this is a new virus type (Network Worms).


    Using the new bug in the Windows, these viruses infect the computer unnoticeably.
    After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
    addresses

    Please install updates for worm elimination and your computer restoring.

    Best regards,
    Customers support service

    _________________

    I saved the file but DID NOT click on it. When I saw that it was the now famous Ichat.jpg image I immediatly removed it.

    I also recieved a second email from this account

    john.green@mail.com>

    The attachment was named-
    test.elm.pif

    The message was as follows-


    The message contains Unicode characters and has been sent
    as a binary attachment.

    ___________________

    I believe that both of these are a virus/ worm targeting PowerPC OSX computers. DO not open them.

    This if the FIRSt I have heard of virus's being sent to .mac accounts!

    All Mac users be on the lookout
     
  2. Chundles macrumors G4

    Chundles

    Joined:
    Jul 4, 2005
    #2
    Sounds like a very bad phishing attempt. No virus here sorry.
     
  3. Bibulous macrumors 6502a

    Joined:
    Jan 19, 2005
    #3
    And Paypal just sent me an email with a link asking me to confirm my account info :rolleyes:

    Edit: Looks more like a spoof, note the poor use of english. Not sure if .Mac has a virus scan, but I would think it would.
     
  4. Emrtr4 thread starter macrumors regular

    Joined:
    Feb 6, 2006
    #4
    If it was phiising wouldnt it have asked me to visit a website?

    All it did was ask me to download an attachment.

    Sorry, I am a newbie on this site, and luckily a newbie when it comes to virus's

    this is my first experience with anything of this nature, even though I have been using computers for about my entire life.
     
  5. TBi macrumors 68030

    TBi

    Joined:
    Jul 26, 2005
    Location:
    Ireland
    #5
    Hmm a .exe and a .pif file. There's something bugging me about that. I don't know what, but something just doesn't seem right... like.. maybe... oh ya those kind of programs only work on windows...
     
  6. Chundles macrumors G4

    Chundles

    Joined:
    Jul 4, 2005
    #6
    They're both Windows-only files. Neither work on a Mac.
     
  7. Emrtr4 thread starter macrumors regular

    Joined:
    Feb 6, 2006
    #7
    shows you how much I know, lol.

    I will change the title of the thread then, so as not to scare people.

    Thank you for the info.
     
  8. MacBoobsPro macrumors 603

    MacBoobsPro

    Joined:
    Jan 10, 2006
    #8
    Hehe... good job you didnt recieve the 'Ivory Coast help us live in [insert country here] and we will pay you $12.5m' email because you would of fallen for that too. :D

    It probably is a phishing attempt but it will only work on a PC and an idiot. It just happens to have a .mac address. ;)
     
  9. TBi macrumors 68030

    TBi

    Joined:
    Jul 26, 2005
    Location:
    Ireland
    #9
    Well might be better in future to do a little more research before posting threads like this...
     
Thread Status:
Not open for further replies.

Share This Page