Virus via "reply to post" e-mail

[Gups]

Im not an expert on viruses etc but thought id let you all know my antivirus picked up and deleted a virus called tanatos.b which was sent a few minutes ago as an attachment called "reply to post: Campaign Air System" which appeared to come from the p8ntballer forums.
If you get an attachment like this obviously delete it rather than open it!

 

[Bunker Imp]

cheers for the heads up guppy

 

[one of the chicks]

Hia

I got one too! So just to let you know it is a virus as far as i can see so delete it and dont open it!!
Love Steph x

 

[beasty1711]

Just because it says its from the p8ntballer forum dosnt actually mean that it is..
a lot of virus's these days spoof the senders address to be that of an email thats on the infected persons PC.

I bet that someone that had either posted on that Campaign Air System thread or subscribed to it is the infected person

 

[James@Kartelprime]

yeah, they create dummy email address like beasty said.

i had one from west midlands police the other day, lol

 

[jahlad]

ive had a couple of dodgy emails in the last couple of days, not had any for weeks eather....norton is picking em out tho and ive stayed infection free.....might be worth everyone being extra careful and making sure they have the latest virus updates etc

 

[Steve Hancock]

Spam, viruses, spy-ware, it all pisses me off.

The other week, i kept geting this ad every second time i opened explorer. I did a couple of different virus scans, and kept trying to clean it with my spybot-killer but it kept reappearing. In the end i turned off the saftey features on my spybot killer and checked all the files in the manual to see if they were meant to be there or not. Finally killed it.

Dirty electro-germs.

Cheers for the warning Gups.

 

[jahlad]

yup ive had that one too recently, eventually got rid of it with spykiller.....well worth a tenner!

 

[Steve Hancock]

And do you know what the ad was for, another anti spybot program! I would never instal that one my computer, they have already shown they are a disreputable company.

 

[Philip]

It uses cached addresses to send to freshly cached addresses, its simply because the worm is spreading through PCs.

Netsky is the running at the moment, use some programs to sort your pc. Mainly:

www.spywareblaster.com
www.lavasoft.de
www.grisoft.com

Windows XP firewall.

Then your PC should be fine.