Linus3

Email BOT & Thunderbird Files Attack

3 posts in this topic

Saturday 27 April I opened a email from a friend with a link to a money-making site. It apparently replicated itself through my Mozilla Thunderbird address list. Many folks have gotten back to me about it. Today I find it may have erased two of my e-mail identities in Thunderbird (but missed one --- possibly because it had no e-mail traffic). Starting yesterday I have run Malwarebytes and a full scan by ZoneAlarm. Those one after the other took over 12 hours. Nothing found. ZoneAlarm suggests in this case to come here for help.

Attached are the GetSystem & Logs

The computer I have which is open to the internet is Win7 32 bit. It is paired with a Win7 64 machine through an IOGEAR Miniview dual monitor KVM. Since it does not send nor receive emails I hope it is protected. I have run both AV apps against it just in case.

virusinfo_syscure.zip

Share this post


Link to post
Share on other sites

The text of the message(s) is either "you should definitely check this out http://[t.co/PGVhJtZ8]

 

~*Advertisement"

 

or "wow this is amazing look into this http://[t.co/rz8XqJ8Z]

 

 

 

~*Advertisement"

 

 

Share this post


Link to post
Share on other sites

Welcome. If you don't have Kaspersky installed, please feel free to use the Kaspersky Malware Removal Tool (AVPTool). It is linked in the first Important topic.

Attach its sysinfo.zip. Located at Virus Removal Tool\LOG\avptool_sysinfo.zip

 

Please change all of your email-related passwords. Make them strong passwords. Not a bad idea to ask your contacts to do the same.

 

Your GetSystemInfo is not posted.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now