cancel
Showing results for 
Search instead for 
Did you mean: 

Fake e-mail from 'plus.com'

dhumble
Grafter
Posts: 94
Registered: 19-08-2007

Fake e-mail from 'plus.com'

I have this morning received a fake e-mail, supposingly from 'plus.com' saying the mail server is down and instead, use a free forwarding service. The then attached file supposingly give details (MoreInfo). ZoneAlarm here quarantined it.

If you get a simular e-mail, it is not from Plus.Net. Mine appears to come from a french CyberCafe.

----

Quote

Subject: Warning about your e-mail account.
From: administration@plus.com
X-SpamPal: PASS


Dear user of "Plus.com" mailing system,


Our main mailing server will be temporary unavaible for next two days,
to continue receiving mail in these days you have to configure our free
auto-forwarding service.


For details see the attached file.


Have a good day,
The Plus.com team http://www.plus.com


Attachment: MoreInfo
7 REPLIES
N/A

Fake e-mail from 'plus.com'

Damnable Frenchies!
N/A

Fake e-mail from 'plus.com'

This sounds like the newly discovered variant of the Bagle virus (Bagle.K) ...
N/A

Fake e-mail from 'plus.com'

Yep, see the Service Status posting for more details of it. Seems to be Bagle-J.
N/A

Fake e-mail from 'plus.com'

It's Beagle virus and not Bagle.
Check it out on Symantec site and any other inc Google.
N/A

Fake e-mail from 'plus.com'

One leaves a smelly mess on the pavement, the other you can put cream on. Ooops, sorry that's a Bagel.

Zone alarm would quarantine it because you have "mail safe" enabled and the attachment will be an executable (which may not always be a virus). It did not quarantine it because it knew it was a virus. You still need a Virus scanner for virus detection.
dhumble
Grafter
Posts: 94
Registered: 19-08-2007

All fine

Yep, I got the file out of ZA quarantine, when I worked out how to and then scanned it. It was Bagle-J.

Cheers, David.
N/A

Fake e-mail from 'plus.com'

Quote
Damnable Frenchies!

They should remember Agincourt.