Go Back   Computer Forums > General Computing > Cyber Safety and Computer Security
Click Here to Login
Join Computer forums Today


Reply
 
Thread Tools Search this Thread Display Modes
 
Old 11-24-2005, 04:15 AM   #1
Baseband Member
 
Avery4jc's Avatar
 
Join Date: Jul 2005
Posts: 79
Default E-Mail: "you visit dirty sites"

Well guys I have no idea what to do...I've never had any problem with junk e-mail since I switched to sbcglobal.net and I'm in love w/ it. Then I open my e-mail today and I see some junk, not a big deal I thought it happens so I reported it as spam and it was added to my block list, then I got to a suspicious e-mail. It said (as the title stated) "You visit dirty sites" or something like that and it was from mail@gov.net and then I looked at my inbox and I had about 5 or 6 of these things from mail@gov.net and from mail@fbi.net
I opened one of them and it said that my IP address had been logged on 30+ suspicious sites and that I needed to download the attached form and respond. It had an address and phone number at the bottom too (presumably fake). I scanned it and Yahoo wouldn't even let me download it because it had so many virus' on it. So my question is this, normally I would just delete it and think wow that was a very well done fake spam mail but since it was from mail@gov.net and others from mail@fbi.net I thought it might be real. But at the same time why would the government contact me through e-mail and send a virus if they had a real problem w/ me. *sigh*
I'm so confused, oh and how does a proxy server work, it may sound random but if I understand it correctly someone who actually does stuff they shouldn't be doing is able to "hide" their IP address, does that mean that they are using some innocent person's IP like mine? Or is this just a well done Spam e-mail. I'm super stressed over this so any help would be appreciated.
Thanks

-Avery
__________________

__________________
Avery4jc is offline   Reply With Quote
Old 11-24-2005, 04:23 AM   #2
Golden Master
 
mammikoura's Avatar
 
Join Date: Jul 2005
Posts: 7,459
Send a message via MSN to mammikoura
Default Re: E-Mail: "you visit dirty sites"

I'm 99% sure it's spam
I'd just delete it.

I woulnd't worry about it at all. If by some huge miracle it would be the goverment/fbi dudes then u can just tell them that u thought it was just spam and ignored it.

And about proxies, they don't really hide the ip, u are connected to a proxy server (which can see & log ur ip) and then when u browse the internet u always do it through that server. So then the ip that u see is that servers instead of ur computers. And the only way that some hacker can use ur ip as a proxy is to hack into ur computer and do what ever he does from there.


So nothing to worry about.
__________________

__________________
0_o
mammikoura is offline   Reply With Quote
Old 11-24-2005, 04:27 AM   #3
Baseband Member
 
Avery4jc's Avatar
 
Join Date: Jul 2005
Posts: 79
Default Re: E-Mail: "you visit dirty sites"

That's a total relief, if I get another one I'll post a screen shot because believe me it was VERY well done...oh also how in the world did they get a fbi.net and gov.net e-mail address?
__________________
Avery4jc is offline   Reply With Quote
Old 11-24-2005, 05:03 AM   #4
Fully Optimized
 
dyserq's Avatar
 
Join Date: Jul 2005
Posts: 2,281
Default Re: E-Mail: "you visit dirty sites"

Actually ... it's a worm ... spreading ... unfortunately
Anyhow, you should visit this site to get more information on it http://www.securitypark.co.uk/articl...2&Categoryid=1
__________________
dyserq is offline   Reply With Quote
Old 11-24-2005, 01:28 PM   #5
Baseband Member
 
Avery4jc's Avatar
 
Join Date: Jul 2005
Posts: 79
Default Re: E-Mail: "you visit dirty sites"

Thank you so much! Now I can have a good Turkey day....Happy Turkey day to everyone on here and thanks again for the help.

-Avery
__________________
Avery4jc is offline   Reply With Quote
Old 11-25-2005, 06:49 PM   #6
Daemon Poster
 
reece296's Avatar
 
Join Date: Aug 2005
Posts: 593
Send a message via MSN to reece296 Send a message via Yahoo to reece296
Default Re: E-Mail: "you visit dirty sites"

Actually out of intrest i ran gov.net and fbi.net through who is and...

fbi.net is registered to Foo Bar Internet
and
gov.net is registered to The Skylonda Group.
__________________
reece296 is offline   Reply With Quote
Old 11-25-2005, 09:15 PM   #7
BSOD
 
SilentScope's Avatar
 
Join Date: Nov 2005
Posts: 205
Default Re: E-Mail: "you visit dirty sites"

I hate virus creators, but they have created a multi-billion dollar industry
__________________
SilentScope is offline   Reply With Quote
Old 11-25-2005, 10:21 PM   #8
In Runtime
 
Brian_Fenner's Avatar
 
Join Date: Nov 2005
Posts: 366
Default Re: E-Mail: "you visit dirty sites"

I've gotten about 75 of these same emails each one containing a virus............
Norton grabbed them all!
__________________
White Bear Lake, Minnesota
GoldWings Rule!
Brian_Fenner is offline   Reply With Quote
Old 11-25-2005, 11:54 PM   #9
BSOD
 
Join Date: May 2005
Posts: 2,734
Default Re: E-Mail: "you visit dirty sites"

Yeah, if the government had something important to tell you, email would be the last method they'd use. They still like their paperwork.

Also, if it really were from the government, the domains would end in gov, not net. So yeah, delete that crap.
__________________
catalyst is offline   Reply With Quote
Old 11-26-2005, 01:13 AM   #10
Baseband Member
 
Avery4jc's Avatar
 
Join Date: Jul 2005
Posts: 79
Default Re: E-Mail: "you visit dirty sites"

Thanks guys!
__________________
Avery4jc is offline   Reply With Quote
Old 11-26-2005, 02:26 AM   #11
Fully Optimized
 
dyserq's Avatar
 
Join Date: Jul 2005
Posts: 2,281
Default Re: E-Mail: "you visit dirty sites"

Ever since i saw your message, i have recieved up to 125 emails from friends and unknown people, all of which contain the WORM_SOBER.AG worm, as i did some research, i found that it matches your case ... the messages about visiting 30 illegal sites ...

Quote:
Virus overview:
WORM_SOBER.AG spammed e-mails are written in both German and English languages. It checks the users system for the version of the Microsoft OS that's running ... if it detects GMX as the domain, it installs one of the German versions; otherwise, it installs one of the English versions.

The worm propagates via email messages that are spammed to recipients. However, once a system is infected, it spreads by itself. The worm has no automated capabilities and must therefore be inadvertently executed by the user to install. To entice the user to do this, the author utilizes classic social engineering techniques, such as promising pictures of celebrities, or alerting the user to illicit behavior.

At least two of the English versions of WORM_SOBER.AG spoof the Federal Bureau of Investigation (FBI) or Central Intelligence Agency (CIA), alerting the user that the agency has found evidence of the user visiting "more than 30 illegal Websites", and asks them to complete the attached "questionnaire". Launching the attachment activates the Worm. Similarly, one of the German versions spoofs Bundeskriminalamt, and threatens legal action against the users' illicit downloads of films, software, and MP3s. The email promises more details of the case in the attached file.

Another version promises a free download of "video clips, pictures and more" of Paris Hilton and Nicole Richie, stars of "The Simple Life" reality television series in the U.S. Attachments are disguised as zipped files.

WORM_SOBER.AG can download and run executable files from certain Web sites that it points to. However, this worm does not seem to have any backdoor capabilities.

As of November 21, 2005 at 2:20 pm (PST, GMT -8:00), TrendLabs has declared a MEDIUM risk alert in order to control the spread of WORM_SOBER.AG.
Very interesting if you see how many people have been infected ... and how the worm spreads itself ...
__________________
dyserq is offline   Reply With Quote
Old 11-26-2005, 02:55 AM   #12
Baseband Member
 
Avery4jc's Avatar
 
Join Date: Jul 2005
Posts: 79
Default Re: E-Mail: "you visit dirty sites"

yeah, I never got spam before but now I am getting it and it all either has to do w/ illegal sites or Paris Hilton & Nicole Richie which is a good and bad thing. Good in that I guess all of my Spam is comming from the same thing but bad because well, it's spam.
I've reported everyone and yahoo does a great job at blocking the sender but they keep sending it from different accounts. I'll have to see if I can block key words in the subject...I think that I can, that way it'll block it whether their on my spam list or not.
__________________
Avery4jc is offline   Reply With Quote
Old 11-26-2005, 05:51 AM   #13
Golden Master
 
ArrizX's Avatar
 
Join Date: Apr 2005
Posts: 16,073
Send a message via MSN to ArrizX
Default Re: E-Mail: "you visit dirty sites"

Anything that you dont recodnize, just delete..
__________________
. ()()()()
./l ,[_\_\ ],
l---L ()lllllll()-
()_) ()_)--o-)_)
ArrizX is offline   Reply With Quote
Old 11-26-2005, 06:10 AM   #14
Fully Optimized
 
dyserq's Avatar
 
Join Date: Jul 2005
Posts: 2,281
Default Re: E-Mail: "you visit dirty sites"

I agree with arrizx
__________________

__________________
dyserq is offline   Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off



All times are GMT -5. The time now is 10:57 AM.


Powered by vBulletin® Version 3.8.8 Beta 4
Copyright ©2000 - 2020, vBulletin Solutions, Inc.
Search Engine Friendly URLs by vBSEO 3.6.0
×