Inbox - VIRUS ALERT "The ACH transaction (ID:99072921 )" report_8747366384.doc.zip - una variante de Win32/Kryptik.TIQ Troyano

-----original message-----

Subject: The ACH transaction (ID:99072921 ),

From: account manager [account.manager@nacha.us]

Date: Wed 8/3/2011 7:28 AM

For: webmaster@itccommunications.net

ACH Payment Canceled

The ACH transaction (ID:99072921 ),

recently initiated from your checking account (by you or any other person),

was canceled by the other financial institution.

Rejected transaction Transaction ID: 99072921 Reason for rejection: See details in the attachment Transaction Report: report_3482736.doc.zip (WinZip archive, Microsoft Word document)

13450 Sunrise Valley Drive, Suite 100 Herndon, VA 20171 (703)561-1100 2011 NACHA - The Electronic Payment Association  

__________ Alerta de ESET NOD32 Antivirus, versión de la base de firmas de virus 6503 (20110929) __________

Alerta, ESET NOD32 Antivirus ha encontrado las siguientes amenazas en este mensaje:

report_8747366384.doc.zip - una variante de Win32/Kryptik.TIQ Troyano - eliminado
report_8747366384.doc.zip > ZIP > report_8747366384.doc.exe - una variante de Win32/Kryptik.TIQ Troyano - era parte de un objeto eliminado

Inbox - from a friend VIRUS ALERT 'POSTCARD FROM HALLMARK'

You should be alert during the next few days. Do not open any message with an attachment entitled

'POSTCARD FROM HALLMARK'
regardless of who sent it to you.
It is a virus which opens A POSTCARD IMAGE,

which 'burns' the whole hard disc C of your computer.

This virus will be received from someone who has your e-mail address in his/her contact list. This is the reason why you need to send this e-mail to all your contacts. It is better to receive this message 25 times than to receive the virus and open it.

If you receive a mail called' POSTCARD,' even though sent to you by a friend, do not open it! Shut down your computer immediately. This is the worst virus announced by CNN.

It has been classified by Microsoft as the most destructive virus ever. This virus was discovered by McAfee yesterday, and there is no repair yet for this kind of virus. This virus simply destroys the Zero Sector of the
Hard Disc, where the vital information is kept.

Inbox - Subject: [virus Win32/Oficla.DH Troyano] UPS Delivery Problem NR 31125. What is UPS doing about these crimminals?

wotannw356@fortran.com>
Received: from 222-154-79-186 is an invalid IP Address.jetstream.xtra.co.nz (222-154-79-186.jetstream.xtra.co.nz [222-154-79-186])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o226W8jO000771
for <xxxxx@xxxxx>; Tue, 2 Mar 2010 07:32:13 +0100
Received: from 222.154.79.186 by mx1.swcp.com; Tue, 2 Mar 2010 19:31:57 +1200
Date: Tue, 2 Mar 2010 19:31:57 +1200
From: "Postal Support Christine Spivey" <parcel.delivery@ups.com>
X-Mailer: The Bat! (v3.71.01) Home
Reply-To: wotannw356@fortran.com
X-Priority: 3 (Normal)
Message-ID: <583385633.38126869506208@fortran.com>
To: xxxxx@xxxxx
Subject: [virus Win32/Oficla.DH Troyano] UPS Delivery Problem NR 31125.
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------5F59AF44A82720"
X-UIDL: ?LT!!@'^!!,1~!!HP3!!
Status: U
X-EsetResult: clean (cleaned), contained Win32/Oficla.DH trojan
Old-X-EsetId: E75C98239060233DFD14C73FC27F253DA219927D
X-EsetId: E75C98239060233DFD14C73FC27F253DA219927D
X-EsetScannerBuild: 6677

Dear customer!

We failed to deliver postal package sent on the 1st of December in time
because the recipient’s address is not correct.

not expecting a package so warning sign

Please print out the invoice copy attached and collect the package at our department.

United Parcel Service of America.

What is UPS doing about these crimminals? Check IP address - http://www.find-ip-address.org/ip-address-locator.php

222-154-79-186 is an invalid IP Address which prooves that crimminals are behind this email


__________ Alerta de ESET NOD32 Antivirus, versión de la base de firmas de virus 4907 (20100302) __________

Alerta, ESET NOD32 Antivirus ha encontrado las siguientes amenazas en este mensaje:

UPS_invoice_Nr145.zip - Win32/Oficla.DH Troyano - eliminado
UPS_invoice_Nr145.zip > ZIP > UPS_invoice_Nr145.exe - Win32/Oficla.DH Troyano - era parte de un objeto eliminado

Virus warning from Spanish friend

Dile a todos los contactos de tu lista que no aceptan un video llamado "Anillos Durex". Es un virus que formatea el ordenador el de tus contactos y además, te quitan la contraseña de Hotmail

Ojo, si ellos lo aceptan, lo agarras tú también. Mándalo urgentemente a todos ellos. Es un mensaje de importancia. Simplemente copia y pega

Grupo de Apoyo en Tecnologías de la Información de la Guardia Civil

Tell all your contacts from your list that they should not accept a video called "Rings Durex". A virus that formats the computer of your contacts and besides, it removes the Hotmail password

Watch out, if they accept, you get it you too. Send it urgently to all. It is a message of importance. Simply copy and paste

Support Group Information Technology Civil Guard