ecvvbt email virus

PiR2 · 04-16-2008, 03:50 AM

Hi everyone,

Could anyone help me with a mail "virus" called ecvvbt. It sends emails to everyone in my contact list inviting them to visit <link removed> or <email removed> and then deletes the contacts from my list.

Any advice or help would be greatly appreciated.

Thank you.

chauffeur2 · 04-16-2008, 05:16 PM

G'Day PiR2, Welcome to TSF!

I recommend that you read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum.
(Simply, click on the coloured links to be re-directed.)

Please ensure that you create a new thread in the HiJackThis Log Help Forum; not back here in this one.

When carrying out The 5 Steps, if you cannot complete any of them for whatever reason, just continue on with the next one until they are all completed.
However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds.

Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can.

Good Luck with it.

Kind Regards,

ejames82 · 04-16-2008, 07:43 PM

pir2,
if you use the preview pane you can "review" your emails without opening them. the sender has no way of knowing your email address is active.

for the most secure email

tools>options>read
the only box to have checked is "read all messages in plain text"

for unreadable emails;
mark messages read after displaying for 5 seconds
automatically download message when viewing in the preview pane
show tooltips in the message list for clipped items

uncheck "read all messages in plain text"

when checking suspicious email have "read all messages in plain text" as the only box checked.
right click suspicious email
click properties>details>message source>maximize
this way, you're not "opening" the email, thus not "giving away" that it's a valid email address.

04-16-2008, 03:50 AM	#1 (permalink)
PiR2 Registered User Join Date: Apr 2008 Posts: 2 OS: windows xp	ecvvbt email virus Hi everyone, Could anyone help me with a mail "virus" called ecvvbt. It sends emails to everyone in my contact list inviting them to visit <link removed> or <email removed> and then deletes the contacts from my list. Any advice or help would be greatly appreciated. Thank you. Last edited by tetonbob; 04-16-2008 at 06:45 PM. Reason: removed possible malware link; please don't post these

04-16-2008, 05:16 PM	#2 (permalink)
chauffeur2 Manager Emeritus Join Date: Feb 2006 Location: Adelaide, South Australia Posts: 10,180 OS: Xp Sp3 with all updates + Vista™ Ultimate SP1. My System	Re: ecvvbt email virus G'Day PiR2, Welcome to TSF! I recommend that you read this article… "Having problems with spyware and pop-ups? - First Steps"; follow the instructions very carefully; then, post all the requested logs and information; as instructed, in the HiJackThis Log Help Forum. (Simply, click on the coloured links to be re-directed.) *Please ensure that you create a new thread in the HiJackThis Log Help Forum; not* back here in this one. When carrying out The 5 Steps*, if you cannot* complete any of them for whatever reason, just continue on with the next one until they are all completed. However,it is extremely important to make mention of the fact that you could not complete any of the steps in your post to The HJT Help Forum; where an Analyst will assist you with other workarounds. Once done, please be patient, as the Security Team Analysts are usually very busy; one of them will answer your request as soon as they can. Good Luck with it. Kind Regards, __________________ Dave T. Submit New Articles If it works, Don't fix it! Especially if Bill Gates had anything to do with it!!

04-16-2008, 07:43 PM	#3 (permalink)
ejames82 Registered User Join Date: Oct 2006 Posts: 396 OS: XP	Re: ecvvbt email virus pir2, if you use the preview pane you can "review" your emails without opening them. the sender has no way of knowing your email address is active. for the most secure email tools>options>read the only box to have checked is "read all messages in plain text" for unreadable emails; mark messages read after displaying for 5 seconds automatically download message when viewing in the preview pane show tooltips in the message list for clipped items uncheck "read all messages in plain text" when checking suspicious email have "read all messages in plain text" as the only box checked. right click suspicious email click properties>details>message source>maximize this way, you're not "opening" the email, thus not "giving away" that it's a valid email address.