Yahoogroups scam mail.

sledge · Post by **sledge** » Wed Mar 03, 2004 1:17 am

I received the following message recently. It is a scam of some sort and may have been sent to anyone that was a member of the yahoo group. Please pass the warning on to anyone that was a member of the yahoo group, as some of them may not be on these forums. It looks like someone took addresses and the format from the archives, or perhaps hacked another member's computer.
Anyone care to solve this riddle?

------- Forwarded message -------
From: johnfine@attbi.com
To: jp1@yahoogroups.com
Subject: [jp1] Notify about using the e-mail account.
Date: Tue, 02 Mar 2004 21:57:40 -0700

> Dear user, the management of Yahoogroups.com mailing system wants to
> let you know that,
>
> Your e-mail account will be disabled because of improper using in
> next
> three days, if you are still wishing to use it, please, resign your
> account information.
>
> For details see the attach.
>
> Cheers,
> The Yahoogroups.com team
> http://www.yahoogroups.com
>
>
> [Non-text portions of this message have been removed]

Post by **The Robman** » Wed Mar 03, 2004 9:31 am

It's not a scam, it's a virus. Fortunately I selected the option to dis-allow attachments in the JP1 group, so hopefully nobody got the attachment and opened it. As the Yahoo JP1 group has been closed down as far as messages go, the virus sender needed to select someone as the "sender" who was a moderator, hence the use of John Fine's old email address.

This message was also sent to the jp1-owner account with the attachment still attached, so the moderators would have received the infected attachment. Hopefully their anti-virus software squashed it (as mine did).

Nils_Ekberg · Post by **Nils_Ekberg** » Wed Mar 03, 2004 10:14 am

The Robman wrote:This message was also sent to the jp1-owner account with the attachment still attached, so the moderators would have received the infected attachment. Hopefully their anti-virus software squashed it (as mine did).

My e-mail provider (RoadRunner) actually caught it before it got to me so I had no problem with it.

Post by **The Robman** » Wed Mar 03, 2004 10:31 am

For more info on this virus, read the Symantec.com page on it. (Thanks to Peter Wallstrum for sending me the link)