Welcome to MalwareRemoval.com,
What if we told you that you could get malware removal help from experts, and that it was 100% free? MalwareRemoval.com provides free support for people with infected computers. Our help, and the tools we use are always 100% free. No hidden catch. We simply enjoy helping others. You enjoy a clean, safe computer.

Malware Removal Instructions

Net-Integration Forum - bad email

Notifications for Security Updates, as well as News and Information from across the web - mostly security minded.

Update Contributors: Members of the Malware Removal University.

Net-Integration Forum - bad email

Unread postby TeMerc » August 16th, 2005, 1:06 pm

Attention Net-Integration forum members!!!

erwin_mi wrote:Several members of net-integration forums ( »forums.net-integration.net ) received multiple identical e-mails with a link to a trojan. Just a moment after I reported this issue, the forum got hacked.


Magnus wrote:When run, this trojan copies itself to C:\Windows\csrss.exe and also drops the file C:\Windows\dll.dll. The actual trojan is a password stealer that will attempt to grab your ICQ, email account, dialup and other passwords. Any found passwords are mailed to two russian email addresses.

If an Internet connection is available, the trojan will attempt to download and execute further files from a Hungarian web site. Unfortunately these files are no longer available and so could not be analyzed.


All above quotes from this DSLR thread
User avatar
TeMerc
Visiting Staff
 
Posts: 461
Joined: March 14th, 2005, 7:22 pm
Location: Phx. AZ.
Advertisement
Register to Remove

Unread postby LDTate » August 16th, 2005, 5:39 pm

I received 4 just like this.

From : Net-Integration Forums <webmaster@net-integration.net>
Sent : Tuesday, August 16, 2005 8:03 AM
To : LINK REMOVED
Subject : Protect Your PC !!! ( From Net-Integration Forums )

| | Trash Can | Inbox


Received: from peace.emfc.com ([67.43.1.57]) by mc4-f37.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 16 Aug 2005 07:07:18 -0700
Received: from eagle1 by peace.emfc.com with local (Exim 4.44)id 1E5168-0007dh-BW; Tue, 16 Aug 2005 09:03:20 -0400
Sender: <eagle1@peace.emfc.com>
X-Message-Info: rbqtmZg9+AF1UA+EY2RQi5w2zpax+nsNhO4Xdn2WKL8=
X-Mailer: IPB PHP Mailer
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - peace.emfc.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [32004 32009] / [47 12]
X-AntiAbuse: Sender Address Domain - peace.emfc.com
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php admin.php
X-Source-Dir: net-integration.net:/public_html/forums
Return-Path: REMOVED LINK
X-OriginalArrivalTime: 16 Aug 2005 14:07:19.0674 (UTC) FILETIME=[D0B65DA0:01C5A26B]
Protect Your PC !!!

Please download antivirus protection
LINK REMOVED
User avatar
LDTate
WTT Teacher
WTT Teacher
 
Posts: 3920
Joined: February 18th, 2005, 8:38 pm
Location: Missouri, USA


  • Similar Topics
    Replies
    Views
    Last post

Return to News Desk



Who is online

Users browsing this forum: No registered users and 2 guests

Contact us:

Advertisements do not imply our endorsement of that product or service. Register to remove all ads. The forum is run by volunteers who donate their time and expertise. We make every attempt to ensure that the help and advice posted is accurate and will not cause harm to your computer. However, we do not guarantee that they are accurate and they are to be used at your own risk. All trademarks are the property of their respective owners.

Member site: UNITE Against Malware