Support Issues: Area Code Change
Internet Security

Email:
Download:
Other Info:

Fake Email regarding NETDOOR

Recently NETDOOR customers received notifications of pending maintenance that requested your account information. The type of message you received is called "phishing." It is a ploy to get personal information from you if you were to respond to the message . They send to random addresses at any domain such as @netdoor.com and hope for the best. These type of messages propagate the Internet all the time and take on many different forms. As in any Internet scam as long as you do not reply to it your information is not in jeop ardy.


Recent Scam Emails
Phishing - Phishing Scheme to obtain your personal account information

Past Viruses
W32.Sober.G@mm - Mass emailing virus
Sasser worm Computer keeps shutting down
W32.Beagle - Mass emailing virus

Phishing Scheme/Scam

The subject of these emails were:
Subject: Maintenance schedule. Final notice.
& 
Subject:Third and final notice from NETDOOR.
Here is an example of the emails being sent as coming from NETDOOR: 
Dear Subscriber,

This is to inform all NETDOOR account holders once again that upgrading/
maintenance of our server that was initially scheduled for this week has
been postponed till next week September 16, 2009 for technical reasons and
again for low response from our customers. On this note, this is the third
and last notification to every account holder with netdoor to forward the
requested information as failure to confirm the requested information will
lead to automatic system deactivation (ASD) after the upgrade and
maintenance like earlier ststed.

Find below the requested information.

* E-mail:

* User ID:

* Password:

* Re-Type Password:

* Home/Office Address:

* Date of Birth:

Thank you for your co operation.

NETDOOR Technical Support
Copyright 2009 Internet Doorway, Inc. ©1995-2009 All Rights Reserved.

W32.Sober.G@mm

W32.Sober.G@mm is a mass-mailing worm that uses its own SMTP engine to spread itself. The subject of the email varies, and it will be in either English or German. The email sender address is spoofed.

The name of the email attachment varies, and it will have a .bat, .com, .pif, .scr, or .zip file extension. It may also have a double extension.

If you have opened the attachment, or think you might be infected, go to the W32.Sober.G@mm virus site and follow the instructions to remove it from there.

The virus affects the following systems:
  • Windows 95
  • Windows 98
  • Windows Me
  • Windows NT
  • Windows 2000
  • Windows Server 2003

Here are two examples of the emails being sent from W32.Sober.G@mm: 
hey dude!#

ive found a s***y virus on my pc. yo must check your pc!
follow the steps in this article.

bye



+-+-+ Mail-Attachment: No Virus found
+-+-+ NETDOOR- AntiVirus Service
+-+-+ http://www.netdoor.com

hey man! you'll not belive me what i've found on your computer!^^ ...
thats funny dude!

well cya soon



+-+-+ Mail-Attachment: No Virus found
+-+-+ NETDOOR- AntiVirus Service
+-+-+ http://www.netdoor.com

Sasser Worm

If you computer keeps shutting down, follow the instructions on this page to remove and prevent the worm.

This worm affects the following system:
  • Windows XP
  • Windows XP with Service Pack 1 (SP1)
  • Windows 2000 with SP2/SP3/SP4

W32.Beagle

This mass-mailing worm opens a backdoor on the infected computer, and begins emailing random messages and attachments to people found on users contact lists.

There are many variants of this virus. A full listing and how to remove them can be found here.

This worm typically affects the following systems:
  • Windows 95
  • Windows 98
  • Windows Me
  • Windows NT
  • Windows 2000
  • Windows Server 2003