UPS Tracking Number # Virus warning!

You may also like...

23 Responses

  1. . says:

    Today, I receive the same email…Watch out!!! virus
    —————————————————
    From: “UPS Manager Wilbur Fisher”
    Attachment: UPS_invoice_NR34072.zip
    Hello! The courier company was not able to deliver your parcel by your address.Cause: Error in shipping address. You may pickup the parcel at our post office personaly!Please attention!The shipping label is attached to this e-mail. Please print this label to get this package at our post office.Please do not reply to this e-mail, it is an unmonitored mailbox.Thank you.United Parcel Service.

  2. Mark says:

    Thanks for the info!

  3. atrembaly says:

    me too, ( january 15 2010 )

    i was waiting an ups delivery, so i was less suspicious about it…
    watch out everyone.

    i will use my legendary virus removal guide, which have served me well a few times…
    To anyone who wants to sucessfully remove virusses, i suggest you this link :

    http://forums.majorgeeks.com/showthread.php?t=35407

  4. Otto says:

    Hi, I got the email and was silly enough to open it because I was curious, thank God for Avast Antivirus.

  5. jiyda Moctar says:

    me too i got it today and was actually awaiting a very important ups delivery and open but thank god i had avast it warned me immediately, although Norton Antivirus that Yahoo! use claim that there is no virus in the attachment. Thank god i had avast!
    watch out everybody!

  6. ricktendo64 says:

    Smart scam

  7. Bob says:

    Does anyone know the name of the virus? My wife double clicked on the attachment on her Win7 computer, and I don’t see anything wrong on the computer yet…

  8. Nik says:

    Hey Bob,
    we have updated this article, so you can check now what this virus actually does.

    Best of luck!

  9. Darren Dimwit. says:

    I also was waiting on a UPS parcel from someone with the same surname as was sending it to me!
    I opened it. AVG couldnt clean it. It was obvious immediatly that I was infected as there was splash screens offering spyware removal and my browser was hijaked and directed to a ‘antivirus’ removal site.
    I ran AVG with no effect. I updated AVG and ran it again. It found nothing.
    I ran SpyBot wich found many virus infections (my system was previously clean) and I proceeded to remove them.
    I rebooted.
    Now I cannot start my pc again. I log in to my admin account and as soon as I can see the desktop before the desktop icons are set… the account logs out.
    This happens on all accounts on the partition.
    The other partition (that I am using now (xp pro)… apears to be unefected…thankfully.)

    What can I do? anybody please help?

  10. Nik says:

    Hello Darren,
    I plan to write tutorial soon on how to fix this, but check this until then.

    First, when you’ll get the chance, uninstall AVG immediately. I’ve seen AVG reporting viruses on paths that don’t even exists. AVG is trash in my opinion.
    When you remove it, please install Microsoft Security Essentials or NOD32 antivirus.

    Start here and let me know if you’ll need additional help.

    http://thinkinginpixels.com/quick-fixes/fix-windows-xp-log-onlog-off-loop/

    It could be that userinit.exe is completely missing or corrupt. The first thing I’d try is extracting userinit.exe from the XP CD. Here are instructions:

    Boot on the XP CD and press ‘R’ to enter the recovery console. If prompted to, select your windows installation and enter the admin password (leave blank if none was set)

    From the command prompt type — copy D:i386userinit.ex_ c:windowssystem32userinit.exe
    D is the drive letter corresponding to the drive containing XP CD

  11. ChrisW says:

    This is free and will get rid of the problem. Its safe as it from Stopzilla and is suitable for the non-techie, dont do brain surgery approach.

    http://www.stopzilla.com/products/stopzilla/infection.do?AID=10034&CID=Internet Security 2010&inf=INTERNET SECURITY 2010&f=11&t=r&d=122009&gclid=CPnG-OTiqJ8CFU0B4wodzBnv0g

  12. Darren Dimwit. says:

    I love you both! (in the most non sexual way possible of course) will try these sugestions now.

  13. Nik says:

    @ChrisW
    That’s why I said that I will write a simple solution which would be more friendly for non-tech users.

  14. Tara says:

    I was expecting a UPS so unzipped this file after scanning it with Nortons Internet Security 2009. However, no file was visible which made me immediately suspicious and very worried. I immediately deleted the saved file. Shortly after Nortons recognised the unpacked but (not executed) file in the temp folder and called it Packed.Generic.265. Definition file 2010.02.008. It blocked the file. So I guess that means it cannot detect the malicious file when zipped??

    I also checked the system for any of the files mentioned by Microsoft Security Essentials as shown in the above article – none were evident to my relief.

  15. Nik says:

    @Tara
    You are safe then. Until today, I’ve received more than 20 variants of this ‘UPS’ mails.

  16. Jeff says:

    ok so I messed up lol 😉 Yesterday I was using my friends computer to check my work email expecting a packiage from ups and yea it was the virus. We have done all his spywayre and stuff (im not a computer person at all I do not know what I am doing) anyways everything works except the internet. when you go to log onto int. explorer it kicks him off right away. Any ideas on how to get his computer fixed?
    Thanks

  17. Aidan says:

    Got a similar email yesterday, saying this:

    UPS Tracking #6343839124‏
    From: Your UPS (delores07@rossloans.com)
    Sent: 26 May 2010 01:54:53
    To: aidanconnor@hotmail.co.uk

    Attachments: 1 attachment
    UPS_LABEL…zip (29.4 KB)
    Hello,

    We were not able to deliver postal package you sent on the 19nd May in time
    because the recipient’s address is not correct.
    Please print out the invoice copy attached and collect the package at our office.

    Your personal manager: Alvaro Horn,
    Customer Service: 1-800-CALL-UPS
    Fax: 888-033-5812
    Your UPS

    What’s weird is that in the ‘To’ section this isn’t even my email address… it’s similar but it got my whole second name wrong, how in this world could I receive it when it wasn’t even sent to my address, any ideas? I knew I hadn’t sent a parcel but I was curious so I tried opening it but Mozilla Firefox detected that it was infected. Lucky eh?

  18. Nik says:

    That is probably just a spoofed address. Your real address should be seen in the mail header.

  19. babycake says:

    got a different one in the junk mail today but i can till that it’s the same idea:

    UPS Tracking number N51848

    Dear client

    The parcel was sent to your home address. And it will arrive within 3 business days.
    More information and the tracking number are attached in document below.

    Thank you for your attention.
    UPS Global Mail.

    3,741 5,425 6,191 4,076,680 Alturas Mono Sp., Monkey, or pretty 3,020 960 2,042 1,151,109 Bridgeport Monterey Sp. , Kings forest 3,340 27,980 24,146 18,962,554 Salinas Napa Ind. 780 20,678 19,800 13,840,291 Napa Nevada Sp. , Heavy fall of snow 972 10,850 14,955 7,203,349 Nevada City Orange (named for its chief product) 750 61,375 34,436 13,812 Santa Ana Placer Sp. , Loose (from placer mines) 1,365 18,584 18,237 9,677,724 Auburn Plumas Sp. , Feathers 2,694 5,681 5,259 2,792,091 Quincy Riverside 7,323 50,297 34,696 16,373,296 Riverside Sacramento Sp. , The Sacrament 1,000 90,978 67,806 41,333,337 Sacramento San Benito Sp. , St. Benedict 1,388 8,995 8,041 6,499,068 Hollister San Bernardino Sp. , St. Bernard 19,947 73,401 56,706 21,392,228 San Bernardino San Diego Sp. , St. James 4,278 112,248 61,665 20,807,594 San Diego San Francisco Sp. , St.

  20. Bob says:

    Got the exact same email yesterday (10/22/10) just had different text, and unfortunately opened it.
    I can’t tell that anything is wrong with my competer yet. I am no computer wiz, just an avarage user. If anyone else got this new virus and can tell me anything, I would appreciate it.

  21. JD says:

    Contact UPS by phone if you’re ever in doubt about the legitimacy of a UPS email prior to opening it – http://www.upsphonenumber.com/

  22. Carla says:

    Hi, I opened the attachment .zip, of an UPS mail, im an idiot! the thing is now I boot the pc in secure mode and the whole screen goes black, and a few seconds later a big blue screen appears with WARNING in red, and a text of warnings.
    What can I do!??? HELP ME!!!!

    fuck Morpheus, Bill Gates and Mark Zukerberg

  23. David says:

    Received this today. Guess is a same idea.
    Dear customer,

    The parcel was sent your home adress.
    And it will arrive within 3 days.
    More information and the tracking number are attached in document below.

    UPS information center.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.