Might it be a virus thingy??

[Stingo]

Just received an 'egreetings card'. Ok, nothing wrong with that you say. Indeed even I have had them before (well, okay it was the kids really)...but this on is a bit odd IMO. The email itself is very slightly reminescent of something from our Eastern European or African friends style of Eengleesh...

...then clicking on the link brings up a security warning box asking if I want to run or save the file name 'ecard.exe'. It also says that it an application of 457KB, and originates from emilimport.com....


It's a little dodgy to me. I'm sure when I've received them before the email says the name of the person that sent it..this one doesn't...

Opinions?

[Stingo]

Hmmm...just gone to the website - seems to be some sort of Spanish website...presumably selling importing services. Pedrosa...are you sending me cheeky notes again??;)

[the_lone_wolf]

don't touch it with a barge pole

[Stingo]

don't touch it with a barge pole


Hmmm, tis what I thought....I'll have to use the good old delete button instead of the barge pole then!!:smt039

[Baph]

That there be the Yodi worm, also known as WORM_NUWAR.GU.

Affects range from performance loss through to complete takeover of your PC (meaning it does stuff without you telling it to, and in extreme cases, locks of fyour keyboard & mouse so you CAN'T do anything).

The worm communicates/is controlled by a FluxBot network, which makes it hard to find the controller. :(

[krhall]

If you don't trust it don't open it - always check www.sophos.co.uk (http://www.sophos.co.uk) first.