[LINK] Email account utilization warning

[Daniel Rose]

If it is Netsky, there's some "big picture" background from the Register.

http://www.theregister.co.uk/content/56/36006.html

"The unknown authors of the Netsky and Bagle worms are battling in
cyberspace for control of vulnerable Windows PCs. Maybe. New versions of the
Bagle worm (e.g. Bagle-J) make derogatory comments about the Netsky worm's
creator within their virus code."

And so on.




Regards,


Daniel Rose                     62621599
Postmaster/Helpdesk
National Library of Australia




-----Original Message-----
From: Howard Lowndes [mailto:lannet at lannet.com.au] 
Sent: Thursday, 4 March 2004 15:24 PM
To: Antony Barry
Cc: Link list
Subject: Re: [LINK] Email account utilization warning


On Thu, 2004-03-04 at 15:13, Antony Barry wrote:
> Linkers
> 
> Amongst the ~80 spam messages a day which get to link for me to 
> eliminate was the message below. Of course there was an attachment. I 
> got a similar message addressed to me supposedly from the managers of 
> id.au.
> 
> It looks like somebody is targeting addresses on the basis of their 
> Australian second level domain. As I've got a mac (and I assume the 
> attachment was a windows executable) I couldn't do anything with the 
> attachment.
> 
> Anybody seen these? Are they a scam or malicious?

Viral.

I think its the Netsky virus.

I have had them to .com.au and to .asn.au

> 
> Tony
> 
> 
> Begin forwarded message:
> 
> > From: staff at edu.au
> > Date: 3 March 2004 7:46:57 AM
> > To: link at www.anu.edu.au
> > Subject: Email account utilization warning.
> >
> >
> > Dear user, the management  of  Edu.au mailing system  wants  to let  
> > you know that,
> >
> > Our  antivirus software has detected a large ammount  of viruses 
> > outgoing
> > from your email account,  you  may use our free anti-virus tool to 
> > clean  up
> > your computer software.
> >
> > Advanced details can be  found  in attached file.
> >
> > Attached file  protected with the password for  security reasons. 
> > Password is 04521.
> >
> > Best  wishes,
> >    The Edu.au  team                             http://www.edu.au
> phone : 02 6241 7659 | mailto:me at Tony-Barry.emu.id.au
> mobile: 04 1242 0397 | http://tony-barry.emu.id.au
> 
> _______________________________________________
> Link mailing list
> Link at mailman.anu.edu.au
> http://mailman.anu.edu.au/mailman/listinfo/link
-- 
Howard.
LANNet Computing Associates - Your Linux people <http://www.lannetlinux.com>
------------------------------------------
Flatter government, not fatter government - Get rid of the Australian
states.
------------------------------------------
To mess up a Linux box, you need to work at it;
to mess up your Windows box, you just need to work on it.
 - Scott Granneman, SecurityFocus

_______________________________________________
Link mailing list
Link at mailman.anu.edu.au
http://mailman.anu.edu.au/mailman/listinfo/link