[admin]

Net-Integration Forum

From their forum admin:

Apprantly mass emails have been sent out using N-I to do so.

These emails are not legitimate mail from net-integration.

Date 8-16-2005 prior to 11:00 AM CDT

Please do not open them! Delete them.

Eagle1 has shut down the Board and is investigating, we will post more news as I receive it.

tashi
Net-Integration Administrator.

Update:

by Eagle1 @ Net-Integration:
  Posted: Aug 16 2005, 07:16 PM

Net-Integration is not sending any spam but only appears to be doing so. The net-integration domain account account was disabled for the majority of the day while the source of the spamming was sought. The ISP (http://pisem.net) that is hosting malware was notified several hours ago and they have not done anything about it so far.

Let it be clarified that Net-Integration does not appear to have been hacked which seems to be a widespread comment. Logs are being reviewed to determine if source can be identified and we will keep all posted.

http://forums.net-in...showtopic=32730

...and a fix for the malware contained in the email:

A batch file has been put together by Atribune ( http://www.atribune.org ) for anyone needing to cleanup the malware from email being sent out. Please note that if you did not open or download attachment you were not infected and it is not necessary to clean.

Download the attached zip file to local folder, unzip it and save it to a location you can remember. Reboot in safe mode and run the fixit.bat file by double clicking or using command prompt.

Reboot to normal mode. Also note it may be necessary to reinstall any of the following: Far, Total Commander, Windows Commander, ICQ, The Bat, Trillian, Miranda.

We thank Atribune very much for his efforts. Please be sure to give thanks as well.

Attached Files

•  fixit.zip   602bytes   339 downloads

Edited by admin, 16 August 2005 - 10:06 PM.

[Advertisements]

I have put this info up on my site

http://www.atribune....tent/view/12/1/

and also had this stickied in the malware removal forum here at GeeksToGo

http://www.geekstogo...ION-t55294.html

Will try to keep the thread in the malware forum updated as I recieve info.

Hopefully Eagle1 can get this sorted out in a quick manner.

[Atribune]

I have put this info up on my site

http://www.atribune....tent/view/12/1/

and also had this stickied in the malware removal forum here at GeeksToGo

http://www.geekstogo...ION-t55294.html

Will try to keep the thread in the malware forum updated as I recieve info.

Hopefully Eagle1 can get this sorted out in a quick manner.

[fleamailman]

If we have already opened this e-mail, does someone here have the patch or what should we do as this thing is a new virus I take it.

[Atribune]

If you have downloaded and ran the exe in question please post a HijackThis log in the Malware Removal forum

http://www.geekstogo...o-Here-f37.html

[Kat]

Net-Integration is open again now!

[admin]

If we have already opened this e-mail, does someone here have the patch or what should we do as this thing is a new virus I take it.

See the original post above, a tool has been created by Atribune for removal.

[Atribune]

Iwas working on it when the user asked but didnt want to say anything

[admin]

Hope it was okay I did.

Nice work Atribune!

[Atribune]

Yeah it's fine now that its out and N-I is up