User forums > Announcements

OK who's sending the virus?

(1/1)

rickg22:
Guys, i've recently been receiving e-mails infected with the W32/Nyxem-D virus (attachments are "winzip.bhx") by someone who has the codeblocks.org in their address book. The virus uses its own e-mail server, so the infected user is unaware that he's sending the e-mails.

(See http://securityresponse.symantec.com/avcenter/venc/data/pf/w32.blackmal.e@mm.html for more info)

Please scan your computers everyone (specially the devs). Thank you.

Update: Last e-mail was sent from 201.25.209.76, which resides in mexico city (no, it's not me, I checked).

thomas:
Actually 201.25.0.0-201.25.1.255 is Brasil Telecom, unlikely this is Mexico City... :)

That could be SolidNuts.

rickg22:
Yes, you're right, it's Brazilia. I got confused somehow.

Anyway who?

rickg22:
No it's not solidnuts, i PM'ed him and his ip is other. I guess we can only wait until the problem fades :(

thomas:
Well, we only have one user in 201.25.0.0/16 and none of the other 32 in the 201.0.0.0/24 range is anywhere near that IP...

Strikes me odd that someone who has never visited the forum has your email address in his address book. Ah well, nothing we can do, I guess. Brazil Telecom will shut him down anyway :)

Navigation

[0] Message Index