Page 1 of 1

Virus / Worm infection.... i believe

Posted: Sat Dec 19, 2009 8:36 am
by Liidian
I have recieved alot of "account regarding mails" about world of warcraft from an fake address newly ("donotreply@blizzard.com"). When i wake up this morning i checked my mail and i had alot of mails that had failed to send. Looking like this:

This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. mrgrim77@peoplepc.com


- Vidarebefordrat meddelande som bilaga -
From: donotreply@blizzard.com
To: mrgrim77@peoplepc.com
Subject: World of Warcraft Account Management
Date: Sat, 19 Dec 2009 15:03:25 +0800


Greetings!This is an automated notification regarding the recentchange(s) made to your World of Warcraft account. Your password has recentlybeen modified through the Password Recovery website. *** If you made thispassword change, please disregard this notification.However, if you did NOTmake changes to your password we recommend you Login verify your password: http://www.worldofwarcraft-wowaccountmangent.comAccount security issolely the responsibility of the account holder. Please be advised that inthe event of a compromised account, Blizzard representatives typically must lockthe account. In these cases the Account Administration team will requirefaxed receipt of ID materials before releasing the account for play.Regards, The World of Warcraft Support Team BlizzardEntertainment

I don't really understand this but is it actually i sending those mails?
Thanks for all hopefully nice answers Oo

Re: Virus / Worm infection.... i believe

Posted: Sat Dec 19, 2009 4:58 pm
by PaRaDoX
Liidian wrote:I have recieved alot of "account regarding mails" about world of warcraft from an fake address newly ("donotreply@blizzard.com"). When i wake up this morning i checked my mail and i had alot of mails that had failed to send. Looking like this:

This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. mrgrim77@peoplepc.com


- Vidarebefordrat meddelande som bilaga -
From: donotreply@blizzard.com
To: mrgrim77@peoplepc.com
Subject: World of Warcraft Account Management
Date: Sat, 19 Dec 2009 15:03:25 +0800


Greetings!This is an automated notification regarding the recentchange(s) made to your World of Warcraft account. Your password has recentlybeen modified through the Password Recovery website. *** If you made thispassword change, please disregard this notification.However, if you did NOTmake changes to your password we recommend you Login verify your password: http://www.worldofwarcraft-wowaccountmangent.comAccount security issolely the responsibility of the account holder. Please be advised that inthe event of a compromised account, Blizzard representatives typically must lockthe account. In these cases the Account Administration team will requirefaxed receipt of ID materials before releasing the account for play.Regards, The World of Warcraft Support Team BlizzardEntertainment

I don't really understand this but is it actually i sending those mails?
Thanks for all hopefully nice answers Oo
Could be someone stealing your accout, or could be someone TRYING to.



Sucks, I wouldn't know what to do, I don't play WoW

Posted: Sat Dec 19, 2009 5:15 pm
by CodeX
It's obviously not a real WoW email, it's obviously a scam as it tells the recipiant to login to their account if they didn't try to recover their password and it doesn't mention their account name at all (plus the URL is fairly clearly jippy: "www.worldofwarcraft-wowaccountmangent.com") combined with the fact it's partially blocked on Firefox for being a scam. Assuming your email address isn't mrgrim77@peoplepc.com (dialup!?) then it's fairly apparent that you are the one sending the emails (also why would you be getting delivery fail notifications otherwise? it's in the fail notification) which would suggest that you have fallen prey to some malware which hopefuly in the future you wont do again in the future. Maybe it's time you stopped running every .exe and .scr you see as well as getting some decent anti-virus/malware such as NOD32 (or if AVG if the price on NOD32 makes it unavailable to you). I haven't had this problem my self (being as amazing as I am) so I can't be more specific.

Posted: Sun Dec 20, 2009 3:32 am
by koolpop0
i started the other day

as long as your not a retard you will be fine :D

Posted: Thu Dec 24, 2009 5:05 am
by Force4
CodeX wrote:(also why would you be getting delivery fail notifications otherwise? it's in the fail notification)
I guess if anybody else uses his address as From: header, then he would be the one receiving the delivery.

Posted: Thu Dec 24, 2009 5:14 pm
by CodeX
donotreply@blizzard.com is the From address, my guess is that your STMP and POP3 logins are linked (hotmail for example) so if there is a fail with the SMTP at the sending stage (not receiving) then it leaves the error message in your POP3 instead of sending it out to the "From" address, maybe things like hotmail have their own outgoing spam filters or it just fails if the From doesn't match your address.