what is grassvalley-doc.exe

[brucedempsey]

Received email asking me to open "grassvalley-doc.exe"
anyone done so ? is it safe?

[GrassValley_SL]

That is a very suspicious file.

I checked and we did not do any blast so most likely it is bad.

Can you please look at the original path to see where this originated from? You can send me details by PM.

Thanks,

[GrassValley_BH]

Bruce, if the email sender was from an abv.bg domain, that is a phishing message and I would like to see it - I sent you a PM.

Official Grass Valley communications come from grassvalley.com domains, always.

[Angelo]

I received the same message but to me it didn't look right so I deleted from my email.

[CentralEurope]

now here in german the first user with the same mail
what including the "grassvalley-doc.exe"


I create a "Warning-Sticky" on top from the german GV-Forum.
.

[CentralEurope]

here is a picture (created from the user) ...
looks not simple falsify ...looks for some higher expenditure...

first post here about the "grassvalley-doc.exe" is dated 11-28-2013

gives in cause to current date 12- 13 2013 , some more information about this .exe ??
(looks more as a virus and not as spam for me)
.

[dnavas]

I also received this email.
I still have it, if anyone cares.
I assumed it was due to adobe "losing" a few million accounts (including mine).
I made my contact info visible only to registered members, though, just in case.

-Dave

[CentralEurope]

Canada = brucedempsey
German = Helfr..a
San Jose = dnavas

therefore push up with the same question

first post here about the "grassvalley-doc.exe" is dated 11-28-2013

gives in cause to current date 12- 13 2013 , some more information about this .exe ??
(looks more as a virus and not as spam for me)

where is the "leak" ... on Grass Valley servers ??
it is now closed or not ??
what should we (the user) to do .... create a new singular only for Grass Valle account valid e-mail adress ??
and with the e-mail adress who goes out of the "leak" ...??
.
.

[dnavas]

Heh, didn't notice that was first from 11-28. Oh well.
I got the email a couple of days ago, so looks like they're trying again.
I don't think this is a GV leak -- my profile was externally visible :shrug:

[CentralEurope]

Grass Valley Announcement

Important Notice: Fake Grass Valley Emails
Beware of fake emails claiming to be from Grass Valley!

A number of Grass Valley customers have reported receiving a fake Grass Valley email messages with subjects such as "Grassvalley New Information" and "Grass Valley Update Netherland" from addresses like [email protected]

Please be aware that these email messages are NOT from Grass Valley! abv.bg is not a Grass Valley domain.

If you receive such a message, DO NOT click any links in the message!

We are currently investigating this matter.

To help us, if you receive a suspicious message, please forward the message as an attachment with full Internet headers (for Gmail use Show Original and copy/paste this into a new message) to [email protected] and also use the Report Spam function in your email client, if it has one. What are the signs of a Suspicious or Fake email?

Fake emails often, but do not always, exhibit one or more telltale signs:

• Unrecognized From address, often from a different domain
• Unnecessarily high or abnormal sense of urgency, "CLICK HERE NOW!" or "IMMEDIATE ATTENTION REQUIRED!"
• Text links that actually link to a different location (for example, the text says http://www.grassvalley.com/ but when you hover over, the link really goes to http://somewhere.else.net/)
• Improper references to Grass Valley (Grass Valley USA, LLC) such as
  • Grassvalley
  • Grass Valley, Ltd,
  • Grass Valley Inc
• Poor or broken English
• Links to executable (.exe or .com) files
• Large blocks of text as an image rather than plain text
• Entire content of message is an image
• Suspicious file attachments (.zip, .pdf, .exe, .com, .bat, etc)
• Fuzzy or obviously edited images
• Mixed fonts
• Strange or broken formatting

If you see these telltale signs, pay extra attention to the content.

Here are additional information and pointers from MailChimp. How do I know I'm reading a REAL marketing or support message from Grass Valley?

Grass Valley uses MailChimp for marketing and service communications. Thus, real messages from Grass Valley via MailChimp include all of the below:

• From email address is one of the following:
  • [email protected]
  • ___@___.___rsgsv.net on behalf of [email protected]
  • ___@___.___.mcdlv.net on behalf of [email protected]
• Grass Valley and Grass Valley, LLC is properly referenced and capitalized
• The Grass Valley mailing address (3030 NW Aloclek Dr...) appears in the footer.
• Includes an Unsubscribe link that goes to one of these servers:
  • list-manage.com
  • list-manage1.com
  • list-manage2.com
  • ..
  • list-manage9.com
• Your name and email address appears in the footer of the message, in "This message was sent to (your name) at (email)"
• The message is written in proper grammatical English, with few, if any, misspellings and awkward phrasings.
• Any downloads or "attachments" point to a grassvalley.com or salesforce.com server and are never executable (.exe or .com) files.

translated and as "Sticky" on top from the german GV-forum

[Rusty]

Good to see GV go pro-active what should be a common sense thing.