DHL virus

mickmcgee

Friend of mine had to reboot his computer this evening after opening an e-mail titled DHL.

He deals with this company all the time, so thought it was from them,
A virus wiped his hard drive, so please be careful ,

mickmcgee

iamskippy

There is also one going around which claims to be from UPS.The email says

Hello!
We were not able to deliver your postal package sent on the 25th of December in time
because the recipient’s address is wrong.
Please print out the invoice copy attached and collect the package at our department.
United Parcel Service of America.

The attachment is a rar file with a trojan exe file. Do not open

'scorthy

We got a warning/heads-up from our IT so when I got the email I deleted it.
"Support Harvey Stahl:
DHL Express. You need to get a parcel NR.0426
Dear customer!
The courier service was not able to deliver your parcel at your address.
Cause: Mistake in address…"
That was Wednesday. Today my Symantec/Norton popped up to say it's quarantined and deleted the attachment. It was resting in my Thunderbird Profile.

mrjoneill

I got an email from a site or reporting it self as parcel.delivery@ups.com with an attachment for invoice called UPS_document_Nr28451.zip when unzipped is an exe file. A scan of it indicated it was a virus. Contacted the ups .com site to report it and there was no follow on.

alfaz

Someone in my home got this too (g/f :mad:) and opened it up to see what the person had bought being delivered from UPS!!!! PC seems to be buggered now.

When I turned on the computer this morning I have a blank screen with no taskbar or desktop items. But a window automatically opens which shows my admin login folder with downloads and stuff (has my name on it) and I can still access all the programs like firefox and tunes etc that is on the PC through that.

Any suggestions on this? Will I need to reboot the entire OS? I'm on Vista.

Any help is appreciated.

youcancallmeal

Yeah I got this as well, It had virus written all over it. The big giveaway is the tracking number only being 4 digits. I forgot to delete it and my Dad opened it a few hours later, Microsoft security on Windows 7 handled it fine though. It was quarantined and deleted. As far as I can gather from looking around most anti-virus programs should detect and deal with it, thats probably why there isn't a lot of guides on how to remove it?

alfaz

error on my part there anyways, but i was sure it was all up to date

mrjoneill

Virus Alert
Beware of email attachment facebook_password_Nr1557.zip from what appears as
"Facebook Accounts" help@facebook.com