topic Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A in Norton Internet Security / Norton AntiVirus

email virus "Private Message" why did my norton int sec allow me to open

Shayvin — Thu, 19 Jul 2012 01:54:40 GMT

I received an email from a friend on my contacts titiled private message, i opened it and got spam and it keeps sending emails to all my contacts. why did norton not disallow me to open like all my friends said...they coulnd' open. i did a full scan and a power erase and i got 2 more emails from the same person. help!

Re: email virus "Private Message" why did my norton int sec allow me to open

lidy — Thu, 19 Jul 2012 02:09:43 GMT

I received this also yesterday. Email came from a trusted friend & I opened it ... it looked like spam a spam site. A while later it sent a copy of the email to everyone on my contact list. I realised because lots of 'delivery failure notification' messages came back to me (wondering what anti virus software they are using because theirs is obviously doing the job!). I tried to clear the virus but couldn't work out how. This morning (16hours later) the emails were again sent out to everyone on my contact list & I don't know where it is coming from. I've deleted all the emails from my folder. How do I get rid of it?

Re: email virus "Private Message" why did my norton int sec allow me to open

SendOfJive — Thu, 19 Jul 2012 03:39:20 GMT

Did either of you click a link in the message or open an attachment?

Re: email virus "Private Message" why did my norton int sec allow me to open

Shayvin — Thu, 19 Jul 2012 13:38:09 GMT

yes I did. I opened it and clicked "here" and my pc said i had to relog into hotmail, i know dont say it. it was from a very trusted person who is going through some awful things so i thought he was trying to be discreet. the site came up "toronto sl**a" and i closed it immediatly but the damage was done. but my friends in my contact list did the same thing and their security did not allow it. why would my NIS not disallow??

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON ADMIN

Shayvin — Thu, 19 Jul 2012 19:31:33 GMT

I saw someone on yahoo search asking the same thing...can a Norton admin help please

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

SendOfJive — Thu, 19 Jul 2012 21:25:26 GMT

It's not possible to address the experiences that other people may have had without knowing what actions they took, and what security and other programs they are using, and exactly what those programs may or may not have done. More importantly, you are assuming the attacks were identical, which may not be the case at all.

We can only discuss your situation, and I'm still not clear on the sequence of events that you describe. What program told you to log into Hotmail, and why? How did you get to the login page? Why would you even do that if you suspected the email had been malicious? Perhaps someone hacked your Hotmail account because you entered your credentials on a fake log-in page. Malware may not even be involved - what you describe could have all been accomplished through social engineering.

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

Shayvin — Sun, 22 Jul 2012 18:57:45 GMT

my question is being evaded. I received an email from a friend titled Private Message. I opened it and clicked onto the link. Then all my contacts were sent the same message at least twice. The friend does not have hotmail. Many of my friends replied and said they coulnt open my message and / or mail failure came through. ...my question is; WHY DID NORTON INT SECR NOT block me from opening the message. It was obviously blocked from my friends who had macafee ect...I beleive once I opened the link, which was spam allowed the virus in. I have an antivirus protection that did not work. WHY and what can be done.

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

SendOfJive — Sun, 22 Jul 2012 19:33:40 GMT

Shayvin wrote:
my question is being evaded.

I can't provide an answer to your question until you provide answers to mine. Again, if this all occurred because of a compromised Hotmail account, there is nothing any antivirus program could have done

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

Shayvin — Sun, 22 Jul 2012 21:36:57 GMT

It wasn't compromised. An email virus was sent to me via a friend with an attachment that I opened. As I mentioned, many friends had a variety of different providers such as yahoo, rogers, bell ect. When you open the email and click the link I got the virus. However, the same thing happened to my friends and when they tried to open the link, their antivirus disallowed. They had mcaphee ect. ..anyone with Norton got infected because Norton allowed them to open the link.

Re: email virus "Private Message" why did my norton int sec allow me to open for LIDY

Shayvin — Sun, 22 Jul 2012 21:42:46 GMT

Hi Lidy, have you figured out what to do? I have not got any solutions as to why NIS allowed ME to open the email and not people with other antivirus'. Did you figure it out or get an answer? Thanks Shayvin

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

SendOfJive — Sun, 22 Jul 2012 22:09:46 GMT

Shayvin wrote:
It wasn't compromised. An email virus was sent to me via a friend with an attachment that I opened. As I mentioned, many friends had a variety of different providers such as yahoo, rogers, bell ect. When you open the email and click the link I got the virus. However, the same thing happened to my friends and when they tried to open the link, their antivirus disallowed. They had mcaphee ect. ..anyone with Norton got infected because Norton allowed them to open the link.

Hi Shayvin,

This is why I am not following you well. You mention becoming infected from clicking a link and from opening an attachment. These are two very different attack vectors, and it matters which one you actually mean. You also mentioned being told to log into Hotmail, which may have some significance. I cannot even attempt to figure out what happened with your contacts until I understand what happened to you first.

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

Shayvin — Tue, 24 Jul 2012 04:56:50 GMT

Ok, I have to remember my project manager days working with my tech guru's ;0)

1. I received an email in my inbox in hotmail from a friend

2. The subject matter of his email said: Private Message

3. So I opened his email

4. Within the email it said: To retrieve this email relog onto hotmail

5. Stupidly,I clicked the link which brought me to hotmail logon screem and I reloged onto Hotmail

6. Instantly, a spam site came up with porn of some nature

7. I went 'oh sh*t and Closed the Site right away

8. Shortly there after, I received several Post Master Failure emails in my inbox.

9. I then received several Emails from friends replying to the Private Message saying: I opened this email and tried to access the link but my pc would not allow.

10. I was shocked because I Did Not Send Them emails

11. I looked into my Send Box and saw that someone, not me sent the same email to ALL my contacts

12. I deleted all the sent emails, inbox emails and did a full sweep with NIS twice and a Power Erase twice.

13. The next day friends emailed me that they got the message from me again but there were no sent emails from MY my sent box

14. I again did a Full Scan

15. This was last week and I have not heard anything from anyone.

My feedback from friends who recieved this email said that their antivirus blocked them from opening the email.

So I have 2 Questions:

1. Why did NIS not block me from opening the link within that email like my friends?

2. Is it gone - or is there a virus still lurking within.

I hope I have helped you get a better picture, Thank you

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

SendOfJive — Tue, 24 Jul 2012 06:19:16 GMT

OK, now we're getting somewhere! FIrst, you were probably not infected with a virus. Instead, this all happened in your Hotmail account online, and not on your computer. Clicking the link to the Hotmail log-in page was where you went wrong. Almost undoubtedly, this sent you to a log-in page that was a very real-looking fake, and that is how the bad guys got your credentials to your Hotmail account. With access to your account, they were then able to steal your contact list and could spam your friends using not only your account, but other accounts as well (spoofing your address in the "From" field) - this is why some messages were in your sent folder and others were not. You do need to secure your Hotmail account and make sure that any information obtained by the bad guys cannot be used to create more mayhem. Please follow the advice given here:

http://ask-leo.com/email_hacked_7_things_you_need_to_do_now.html

We are dealing here with a phishing attack, and not a virus. Phishing sites, such as the presumably fake Hotmail log-in page, commonly appear and then quickly disappear within a day or two, and so the time window for protection is the short period between the time that the site is discovered and the time that it vanishes. While I cannot be certain why you were not prevented from going to the page, it is likely because the site was fresh and had not yet been identified as a phishing site.

While the "porn" site you landed on might have also hosted malware, if your virus scans are coming up clean, you are probably not infected and do not need to worry too much about that - but you do need to secure your Hotmail account as previously mentioned. Your contacts may continue to receive messages that appear to come from you, even though they actually do not, because the spammers do have their addresses and are able to spoof yours as the sender. In most cases though, the spammers will abandon your address rather quickly, so things may improve over the course of a week or two - in fact, if your contacts are no longer reporting spam from you, this may already be the case.

Shayvin wrote:
My feedback from friends who recieved this email said that their antivirus blocked them from opening the email.

If that is true, it is because, unlike you, your friends downloaded the messages to the email client on their machines where their antivirus could detect a malicious attachment if one was present. Webmail services like Hotmail cannot be scanned by your AV, because the data is all stored on servers somewhere, and not on your computer where Norton would have access to it.

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

Shayvin — Tue, 24 Jul 2012 13:18:59 GMT

Thank you so much Guru!

Hotmail Admin closed my account in order to deal with the spam and then I was on it another 3 days later. I have not heard that they are continuing to get spam from "me" so your comment about moving on hopefully happened already. I also received the same explanation , almost word for work from a vp of tech from a big company, regarding some antivirus software getting the details of phishhing before hand and blocking it where as Norton most likely had not..but most likely has now.

My apologies for not explaining this issue properly the first time and a huge THANK YOU for your time. I know you volunteer and I am as many are most grateful. Maybe Norton should hire you?? . If I see anything else "Phishy" I will post back. However, I believe the scoundrels have moved on. Cheers and All the Best. Shay

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

huwyngr — Tue, 24 Jul 2012 14:09:43 GMT

Glad you got the issue resolved and I certainly hope that closing your Hotmail account stops the spam flow.

Re: email virus "Private Message" why did my norton int sec allow me to open HELP NORTON A

SendOfJive — Tue, 24 Jul 2012 17:54:09 GMT

Hi Shayvin,

You're welcome...and no more clicking links in emails! :smileyhappy:

Re: email virus "Private Message" why did my norton int sec allow me to open

HélèneLessard — Thu, 09 Aug 2012 07:52:01 GMT

I got the same thing.

but someone hack me as the same time. I was able to get back my account.

To best thimg to do when you got this message is:

+Change you password

+Changes you preference email option: security question with your answer. updatimg your database, phone number.

+Delete all your cookies and your history of your navigator

After doing this, it all stop and I advice my contacts about that thing