Help - Search - Members - Calendar
Full Version: Help! Virus or potential Hacker?
The Planet Forums > Control Panels > Helm
Carasage
Someone is sending virus to all our domains on the servers.
This started just 2 days ago.

I am using MailEnable and scanned each servers for virus using Mcafee. Nothing turned up.

The email sent out is as follows:
* I've replaced all names and domains with generic variables.

This is being sent to all email accounts and the sender is "register@domain.com"

but we dont even have "register" as an account.

Dear user [user name],

You have successfully updated the password of your Domain account.

If you did not authorize this change or if you need assistance with your account, please contact Domain customer service at: register@domain.com

Thank you for using Domain!
The Domain Support Team






+++ Attachment: No Virus (Clean)
+++ Domain Antivirus - www.domain.com
newexpos
Its not just you.. those virii' pop up every few months and Ive got them on a box here at ev1 and one thats hosted elsewhere
RS-89563
Man you are not alone. a lot of servers are receiving that crap.
Just make sure you´ve got MailScanner+clamav (or any other scan) working on your server, at least to prevent the propagation of that virus to your clients.

Regards,
Pablo
hair
I've getting hundreds of those every day. Checking the headers it appears I have a handful of customers who are infected. Of course, there is no way to figure out who it is via an IP. All I do is delete each email that comes from my own domain.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.