Infected email from betaone?

Dave · #1 13th Feb 06, 09:24 PM

I got this email claming to be from BetaONE that my AV tagged as infected with "W32.Mytob.EB@mm" virus.

I know it wouldn't really come from BetaONE, but it came in through my betaone.net email address so I thought I would bring it to everyones attention so they don't try to open it.
It was a zip file containing a file that ended in .doc (whole lot of spaces) .pif

Quote:

Dear user dave,

It has come to our attention that your Betaone User Profile ( x ) records are out of date. For further details see the attached document.

Thank you for using Betaone!
The Betaone Support Team

+++ Attachment: No Virus (Clean)
+++ Betaone Antivirus - www.betaone.net

Message source:

Quote:

X-Symantec-TimeoutProtection: 0
X-Symantec-TimeoutProtection: 1
Received: from betaone.net ([88.106.167.64]) by elgus.net with MailEnable ESMTP; Mon, 13 Feb 2006 14:58:17 -0600
From: support@betaone.net
To: (my addy)@betaone.net
Subject: Warning Message: Your services near to be closed.
Date: Mon, 13 Feb 2006 20:58:25 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_BE4E1583.F6B45525"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0001_BE4E1583.F6B45525
Content-Type: text/html;
charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit

<html>
<body>
 Dear user dave, 
 It has come to our attention that your Betaone User Profile ( x ) records are out of date. For further details see the attached document. 
 Thank you for using Betaone!
 The Betaone Support Team 
 
 +++ Attachment: No Virus (Clean)
 +++ Betaone Antivirus - www.betaone.net
</body>
</html>

------=_NextPart_000_0001_BE4E1583.F6B45525
Content-Type: application/octet-stream;
name="important-details.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="important-details.zip"
UEsFBgAAAAAAAAAAAAAAAAAAAAAAAA==
------=_NextPart_000_0001_BE4E1583.F6B45525--

Be carefull everyone!
Dave