re-new malware to me ?

joe134

Hi, Just had an e-mail from my daughter,s correct e-mail address;
It said JO, CLICK HERE TO SEE MESSAGE.
I clicked, and a dialogue box came up in middle of screen with my correct e-mail address, but password blank.
I did not put password in, clicked out.
Tried again, AVAST detected it as virus/malware, url;;didn,t write it down;
Tried again,same thing but different url. deleted it.
Has anyone come across this one before??
Obviously phishing for my password. Very convincing, except, my name is JOE, not JO.That,s what alerted me.

joe134

joe134 wrote: »

Hi, Just had an e-mail from my daughter,s correct e-mail address;
It said JO, CLICK HERE TO SEE MESSAGE.
I clicked, and a dialogue box came up in middle of screen with my correct e-mail address, but password blank.
I did not put password in, clicked out.
Tried again, AVAST detected it as virus/malware, url;;didn,t write it down;
Tried again,same thing but different url. deleted it.
Has anyone come across this one before??
Obviously phishing for my password. Very convincing, except, my name is JOE, not JO.That,s what alerted me.

EDIT: Just checked my Gmail inbox, it,s in there too.
Looks like daughters pc is infected, and they are using her address book;
clever beggars eh;

spg_SCOTT

It is a phishing email, trying to get your account info, so it can spam everyone else in your address book...

Check with daughter whether she has received the same, and get her to change her password to her email account. (It may also be a good time to inform her of the scam and what to look for )

A scan of the machine wouldn't go amiss either.

smos585

joe134 wrote: »

EDIT: Just checked my Gmail inbox, it,s in there too.
Looks like daughters pc is infected, and they are using her address book;
clever beggars eh;

This is a very common virus at the moment, its been round here like wildfire. Once you open this email, it silently sends out emails to all your contacts - I am aware of several folks who have had their email accounts blocked by their providers (inc hotmail). I am also aware of one person (my daughter in law) who told me she opened the email on her samsung android phone using hotmail, and everyone in the family received the email from her.

I have found that traditional AV systems pretty useless at spotting it or doing anything to kill it. I have also found that by downloading Combofix and malwarebytesis a pretty effective way of killing it.

see her

http://www.bleepingcomputer.com/combofix/how-to-use-combofix follow the tutorial, be xareful though as it is a pretty powerful tool (run Combofix /uninstall from the command prompt when done).

http://shop.malwarebytes.org/lpa/342/3/7268/index_b.html?gclid=COD-qPbm4a0CFYsntAod0jm-fg

joe134

smos585 wrote: »

This is a very common virus at the moment, its been round here like wildfire. Once you open this email, it silently sends out emails to all your contacts - I am aware of several folks who have had their email accounts blocked by their providers (inc hotmail). I am also aware of one person (my daughter in law) who told me she opened the email on her samsung android phone using hotmail, and everyone in the family received the email from her.

I have found that traditional AV systems pretty useless at spotting it or doing anything to kill it. I have also found that by downloading Combofix and malwarebytesis a pretty effective way of killing it.

see her

http://www.bleepingcomputer.com/combofix/how-to-use-combofix follow the tutorial, be xareful though as it is a pretty powerful tool (run Combofix /uninstall from the command prompt when done).

http://shop.malwarebytes.org/lpa/342/3/7268/index_b.html?gclid=COD-qPbm4a0CFYsntAod0jm-fg

Hi, I,ve notified my daughter, as it came from her hotmail address.
I did open it to view it, clicked, but did not give my password. It had my proper username, but not p/word, that,s what it wanted, so I hope I stopped it getting into my system;
Avast did detect it on mine just as I tried to click on 2nd time, to check the url,which changed.
AVAST/Malwarebytes. Spybot/ all show my system clear, so perhaps I nipped it in the bud.Thanks for the links.
By not entering my p/word, it should have stopped it getting to my address book???I hope?
Going to get daughters, pc and clean it for her.

joe134

spg_SCOTT wrote: »

It is a phishing email, trying to get your account info, so it can spam everyone else in your address book...

Check with daughter whether she has received the same, and get her to change her password to her email account. (It may also be a good time to inform her of the scam and what to look for )

A scan of the machine wouldn't go amiss either.

Hi, Thanks, it,s only her password she needs to change, not her actual e-mail a/c username? Going to change mine as well, just to be safe.

joe134

joe134 wrote: »

Hi, Thanks, it,s only her password she needs to change, not her actual e-mail a/c username? Going to change mine as well, just to be safe.

UPDATE; HI Guys, Got daughters pc, running full malwarebytes scan, "hrs 45 minutes so far??????
3 detections,but says still scanning C;Windows, wnsx86 etc, the data it,s scanning hasn,t changed, although it says it,s still scanning.
Doos anyone think that the malware is preventing scan completing??
Never taken this length of time before on mine, 1hr+ tops.
Any advice would be most grateful.

graham.senior

Just let malawarebytes finish can take awhile somtimes

waddler_8

Just do a quick scan. The quick scan looks in all the areas malware's likely to be loading from or running from. Over the quick scan, the full scan might only find harmless traces. 99.9% of the time the full scan isn't needed.

joe134

graham.senior wrote: »

Just let malawarebytes finish can take awhile somtimes

Hi, Thanks for reply, i use malwarebytes on mine, never, ever known it it 3+hrs

PHARR

joe134 wrote: »

By not entering my p/word, it should have stopped it getting to my address book???I hope?
Going to get daughters, pc and clean it for her.

Just because you didn't enter your password doesn't mean it hasn't sent it to all your address book, these virus's do sometimes exploit and spam your address book sometimes they fail. However do not worry but take note that links to 'logins/user account updates etc' emails can be very dangerous and not to open any links that dont look right to you.

Like somebody said, this is a massively popular virus and the only way to avoid it is to know when to open an email and when not to... more the case of clicking a link in an email i mean.