Notify about your e-mail account utilization.

[Guest guest]

,

I have no idea what you are talking about here... Yes, I have McAfee and it says my computers fine... I will recheck it though... It ran at 4am this morning... Let me know what is going on also, should I stop posting unti; you figure out what this is all about???

Love

Mom

Mom,

Was this sent to you? If you were sending mass viruses, my software would pick it up, so I'm not sure why you got this. Do you have av software? Do an update and scan, and I'll send you a link to scan your computer, but that is strange. I'll write to and ask what this is about.

Hugs,

One wordfrees us of all the weight and pain of life: That word is,Love!

Sophocles Surnames I am following:Mc Intosh/Mac Intosh/Mac k Intosh -- Lambert -- Osterhout -- Spring -- Fauver -- Tilden -- Handy -- Haller -- Leininger -- Beckham -- Godden -- Brown -- -- Barbara -- Losure -- Spade -- Ferris -- -- Chronninger -- Myles -- Weirich -- Shonk -- Inches -- Burditt -- 's -- Frosch/Frozeck -- Turrittin -- Proudfoot/Stoltzfuss -- Mattocks -- Oliver -- Peth -- Etc....angelbear1129@...

[Guest guest]

,

what worries me about that is that it is not gramatically

correct....anything coming from a professional company would usually

be grammar/spell checked, right? That is what worries me...

[Guest guest]

Thanks, how do I use it?

[ ] Notify about your e-mail account utilization.

Dear user of gateway e-mail server,

Our antivirus software has detected a large ammount of viruses outgoing

from your email account, you may use our free anti-virus tool to clean up

your computer software.

Pay attention on attached file.

Sincerely,

The team

http://www.

[Guest guest]

> Dear user of " " mailing system,

>

> Our main mailing server will be temporary unavaible for next

two days,

> to continue receiving mail in these days you have to configure our

free

> auto-forwarding service.

>

> For details see the attach.

>

> Attached file protected with the password for security reasons.

Password is 05182.

>

> Cheers,

> The team

http://www.

>

>

>

[Guest guest]

> Dear user of " " mailing system,

>

> Our main mailing server will be temporary unavaible for next

two days,

> to continue receiving mail in these days you have to configure our

free

> auto-forwarding service.

>

> For details see the attach.

>

> Attached file protected with the password for security reasons.

Password is 05182.

>

> Cheers,

> The team

http://www.

>

>

>

[Guest guest]

Ignore - I'm pretty sure it's a virus!

> > Dear user of " " mailing system,

> >

> > Our main mailing server will be temporary unavaible for next

> two days,

> > to continue receiving mail in these days you have to configure

our

> free

> > auto-forwarding service.

> >

> > For details see the attach.

> >

> > Attached file protected with the password for security reasons.

> Password is 05182.

> >

> > Cheers,

> > The team

> http://www.

> >

> >

> >

[Guest guest]

Ignore - I'm pretty sure it's a virus!

> > Dear user of " " mailing system,

> >

> > Our main mailing server will be temporary unavaible for next

> two days,

> > to continue receiving mail in these days you have to configure

our

> free

> > auto-forwarding service.

> >

> > For details see the attach.

> >

> > Attached file protected with the password for security reasons.

> Password is 05182.

> >

> > Cheers,

> > The team

> http://www.

> >

> >

> >

[Guest guest]

> Ignore - I'm pretty sure it's a virus!

Thanks! I just didn't want to take any chances!

Love,

Diane.

[Guest guest]

> Ignore - I'm pretty sure it's a virus!

Thanks! I just didn't want to take any chances!

Love,

Diane.

[Guest guest]

Yep ... these folks used to be the best ISP in Thailand, as well as the

first. Actually this IP is their Chiang Mai branch in northern

Thailand. They sure have gone downhill in recent years ...

- - - - - - - - - - pasted whois info - - - - - - - - -

203.155.36.156

inetnum: 203.155.36.128 - 203.155.36.255

netname: KSC-CM-ADSL-TH

country: TH

descr: KSC ChiengMai Branch (ADSL usage)

descr: **********************************************

descr: abusing network please contact : abuse@...

descr: **********************************************

admin-c: TOC1-AP

tech-c: TOC1-AP

status: ASSIGNED NON-PORTABLE

changed: netadmin@... 20021016

mnt-by: KSC-ADMIN

source: APNIC

person: Technical Operation Center

address: KSC Commercial Internet Co.,Ltd.

address: Operation Department

address: 2/4 Samaggi Insurance Tower 10th Fl., Viphavadee-Rangsit

Rd.,

address: Thungsonghong, Laksi

address: Bangkok 10210

country: TH

phone: +66-2-9797777 ext. 8428

e-mail: netadmin@...

nic-hdl: TOC1-AP

mnt-by: KSC-ADMIN

changed: admin@... 20011012

changed: hm-changed@... 20030718

source: APNIC

- - - - - - - - - - - - - -

Regards/, in Bangkok (NOT on ksc ...!)

-----Original Message-----

From: Bill Kingsbury [mailto:kingsbry@...]

Sent: Friday, 12 March, 2004 10:36 AM

At 07:05 PM 3/11/2004, some hacker wrote:

>

>Dear user of ,

>

>Some of our clients complained about the spam (negative e-mail

>content) outgoing from your e-mail account. Probably, you have been

>infected by a proxy-relay trojan server. In order to keep your

>computer safe, follow the instructions.

>

>For further details see the attach.

>

>For security reasons attached file is password protected. The

>password is " 72705 " .

>

>Have a good day,

> The team http://www.

>

>

>[Non-text [WORM/VIRUS] portions of this message have been removed]

The above messgage is NOT from Wanda, nor is it from

" administration " ; rather, it IS from

" Remote-IP: 203.155.36.156 " -- an ISP [--or relay point?]

in Bangcock, Thailand. (The hacker could be anywhere.)

=== Header excerpts from the hacker (or Worm/Virus script) :

Received: from unknown (HELO asinshop-4) (203.155.36.156) by

mta4.grp.scd. with SMTP; 12 Mar 2004 03:08:23 -0000

Oxyplus

Message-ID: <ptkvyieytmukwxkkwll >

X-eGroups-Remote-IP: 203.155.36.156

X-eGroups-From: administration

From: wanda85929@...

=== Header excerpts from Wanda's previous message:

( 66.218.67.184 is in Sunnyvale, CA, USA )

Received: from [66.218.67.184] by n25.grp.scd. with NNFMP; 12

Mar 2004 01:38:06 -0000

oxyplus

Message-ID: <c2r49u+g29leGroups>

In-Reply-<c2qnsd+mql9eGroups>

User-Agent: eGroups-EW/0.82

X-Mailer: Message Poster

X-eGroups-Remote-IP: 66.218.66.81

From: " wanda85929 " <wanda85929@...>

The above lookups are done by using :

1) http://www.arin.net/whois

2) http://www.apnic.net/apnic-bin/whois.pl

Bill

[Guest guest]

Additional input from Mail website ...

- - - - - -

Today's tip: Did you receive an email that impersonated and

contained a virus? Forward it to spoof@....

[Guest guest]

I don't think I would go there, I believe I would install AVG and use it for my

e-mail instead. Could be something they want on your computer.

But go with your instincts.

Gale ^i^

http://orgone.biz

Notify about your e-mail account utilization.

Dear user of ,

Our antivirus software has detected a large ammount of viruses outgoing

from your email account, you may use our free anti-virus tool to clean up

your computer software.

For more information see the attached file.

For security reasons attached file is password protected. The password is

" 11541 " .

The Management,

The team http://www.

[Guest guest]

Yes, That is a virus.

Erma

At 08:22 PM 3/13/2004, you wrote:

>I don't think I would go there, I believe I would install AVG and use it

>for my e-mail instead. Could be something they want on your computer.

>

>But go with your instincts.

>

>Gale ^i^

><http://orgone.biz>http://orgone.biz

>

> Notify about your e-mail account utilization.

>

>

> Dear user of ,

>

> Our antivirus software has detected a large ammount of viruses outgoing

> from your email account, you may use our free anti-virus tool

> to clean up

> your computer software.

>

> For more information see the attached file.

>

> For security reasons attached file is password

> protected. The password is " 11541 " .

>

> The Management,

> The

> team <http://www.>http://www.

>

>

>

[Guest guest]

Looks like a virus delivery ruse, to me. I've been getting a lot

of these lately, mostly masquerading as my internet service

provider, but here hiding behind groups' skirts.

>> For security reasons attached file is password protected.

The password is " 11541 " <<

Gimmeabreak. " For security reasons, " GET LOST.

Heh heh heh.

The reason there was no attachment with this message is because

oxyplus is configured to delete atttachments.

When I ran these bogus messages by my ISP, asking if the messages

had originated with the ISP, the ISP denied originating them and confirmed

the messages' virus content.

The big tipoff was that these messages were nothing like any message

I'd ever received from the ISP. Too general, nonspeciific and uncharacteristic.

Obvious, really.

Word to the wise, internet is rampant lately with way more virus

activity than I've seen at any time since 1998. And a lot of these

executable virus attachments are disguised with extensions

like zip and doc that experienced internet users are accustomed

to being harmless.

" Just Say No "

Trouble you don't need.

Put a hitch in your gitalong.

-- Green

Notify about your e-mail account utilization.

Dear user of ,

Our antivirus software has detected a large ammount of viruses outgoing

from your email account, you may use our free anti-virus tool to clean up

your computer software.

For more information see the attached file.

For security reasons attached file is password protected. The password

is " 11541 " .

The Management,

The team http://www.

[Guest guest]

Absolutely!!

BTW AVG, as suggested by Gale, can be downloaded and installed for free

from www.grisoft.com. I have used it for years with never a problem.

Lately, it seems to be updating itself twice daily just to keep up with

the new spams and viruses ... or is that virii ;-))

Regards/, in Bangkok

-----Original Message-----

Yes, That is a virus.

Erma

At 08:22 PM 3/13/2004, you wrote:

>I don't think I would go there, I believe I would install AVG and use

>it

....

>Gale ^i^

[Guest guest]

On Mon, 15 Mar 2004 09:20:26 +0000,

resusruss@... wrote:

Dear user of " " mailing  system,

Your e-mail account will be  disabled  because of

improper using in next

three  days,  if  you are  still  wishing to  use it,

please, resign  your

account  information.

For more information see the  attached file.

Best wishes,

     The

IN REPLY

Can you please explain to me why I have received the

above notification to disable my e-mail account within

the next three days due to " IMPROPER USING " when I have

not accessed this particular site for nearly two weeks?

Can you also provide the attached file which was not

sent with this e-mail.

Awaiting your explanation.

Regards

Graham Simpson

[Guest guest]

Hi all,

I got one of these too. I am always suspicious of wierd e-mails and generally

delete and ignore them. Is the attachment harmful? I suggest we just leave it

to the list owner to sort out.

Tim

Re: Notify about your e-mail account

utilization.

On Mon, 15 Mar 2004 09:20:26 +0000,

resusruss@... wrote:

Dear user of " " mailing system,

Your e-mail account will be disabled because of

improper using in next

three days, if you are still wishing to use it,

please, resign your

account information.

For more information see the attached file.

Best wishes,

The

IN REPLY

Can you please explain to me why I have received the

above notification to disable my e-mail account within

the next three days due to " IMPROPER USING " when I have

not accessed this particular site for nearly two weeks?

Can you also provide the attached file which was not

sent with this e-mail.

Awaiting your explanation.

Regards

Graham Simpson

Member Information:

List owner: Ian Sharpe Owner@...

Editor: Ross Boardman Editor@...

ALL list admin messages (subscriptions & unsubscriptions) should be sent to

the list owner.

Post message: egroups

Please visit our website http://www.remotemedics.co.uk

Regards

The Remote Medics Team

------------------------------------------------------------------------------

[Guest guest]

Dear All

I have not sent any emails re email account

utiliation. Please IGNORE and I will check my system

out.

Many thanks

Russ

--- Tim <fizgig@...> wrote: > Hi all,

>

> I got one of these too. I am always suspicious of

> wierd e-mails and generally delete and ignore them.

> Is the attachment harmful? I suggest we just leave

> it to the list owner to sort out.

>

> Tim

> Re: Notify about

> your e-mail account utilization.

>

>

> On Mon, 15 Mar 2004 09:20:26 +0000,

> resusruss@... wrote:

>

>

>

>

>

> Dear user of " " mailing system,

>

> Your e-mail account will be disabled because of

> improper using in next

> three days, if you are still wishing to use

> it,

> please, resign your

> account information.

>

> For more information see the attached file.

>

> Best wishes,

> The

>

> IN REPLY

>

> Can you please explain to me why I have received

> the

> above notification to disable my e-mail account

> within

> the next three days due to " IMPROPER USING " when I

> have

> not accessed this particular site for nearly two

> weeks?

>

> Can you also provide the attached file which was

> not

> sent with this e-mail.

>

> Awaiting your explanation.

>

> Regards

> Graham Simpson

>

>

>

> Member Information:

>

> List owner: Ian Sharpe Owner@...

> Editor: Ross Boardman

> Editor@...

>

> ALL list admin messages (subscriptions &

> unsubscriptions) should be sent to the list owner.

>

> Post message: egroups

>

> Please visit our website

> http://www.remotemedics.co.uk

>

> Regards

>

> The Remote Medics Team

>

>

>

>

------------------------------------------------------------------------------

>

[Guest guest]

All,

Firstly there is no need to worry, the RM server scrubs all

attachments anyway this is done as a deliberate anti virus precaution.

There have been a couple of incidences of these mails and as so far they

seem not be harmful as the attachments are scrubbed I'm happy to leave

them as they are, if however the incidences increase and they start to

clog the list I'll contact customer services and ask for

some assistance.

Hope this helps

Ian

Re: Notify about your e-mail account

utilization.

Hi all,

I got one of these too. I am always suspicious of wierd e-mails and

generally delete and ignore them. Is the attachment harmful? I suggest

we just leave it to the list owner to sort out.

Tim

Re: Notify about your e-mail account

utilization.

On Mon, 15 Mar 2004 09:20:26 +0000,

resusruss@... wrote:

Dear user of " " mailing system,

Your e-mail account will be disabled because of

improper using in next

three days, if you are still wishing to use it,

please, resign your

account information.

For more information see the attached file.

Best wishes,

The

IN REPLY

Can you please explain to me why I have received the

above notification to disable my e-mail account within

the next three days due to " IMPROPER USING " when I have

not accessed this particular site for nearly two weeks?

Can you also provide the attached file which was not

sent with this e-mail.

Awaiting your explanation.

Regards

Graham Simpson

Member Information:

List owner: Ian Sharpe Owner@...

Editor: Ross Boardman Editor@...

ALL list admin messages (subscriptions & unsubscriptions) should be

sent to the list owner.

Post message: egroups

Please visit our website http://www.remotemedics.co.uk

Regards

The Remote Medics Team

------------------------------------------------------------------------

------

[Guest guest]

All,

It is a rogue message, please ignore it. You will not be affected by any

attachments as all attachments are scrubbed at source as an anti virus

measure. I have no idea where the link leads but my suggestion would be

ignore the mail and delete it. If it turns out to be a problem I'll

contact services.

Rgs

Listowner

Re: Notify about your e-mail account

utilization.

On Mon, 15 Mar 2004 09:20:26 +0000,

resusruss@... wrote:

Dear user of " " mailing  system,

Your e-mail account will be  disabled  because of

improper using in next

three  days,  if  you are  still  wishing to  use it,

please, resign  your

account  information.

For more information see the  attached file.

Best wishes,

     The

IN REPLY

Can you please explain to me why I have received the

above notification to disable my e-mail account within

the next three days due to " IMPROPER USING " when I have

not accessed this particular site for nearly two weeks?

Can you also provide the attached file which was not

sent with this e-mail.

Awaiting your explanation.

Regards

Graham Simpson

Member Information:

List owner: Ian Sharpe Owner@...

Editor: Ross Boardman Editor@...

ALL list admin messages (subscriptions & unsubscriptions) should be sent

to the list owner.

Post message: egroups

Please visit our website http://www.remotemedics.co.uk

Regards

The Remote Medics Team

[Guest guest]

Folks,

This is a virus and can confirm that this is not from me as my home machine has

not been switched on for the last day and this note is being sent by webmail.

The virus mimics other people email addresses and tries to trick you into using

the attachment as the tool to keep your account open. As Ian correctly states,

no attachments can come in via the list so there is no need for panic.

Cheers,

Ross

>

> From: ross.boardman@...

> Date: 2004/03/16 Tue PM 04:02:50 GMT

>

> Subject: Notify about your e-mail account utilization.

>

> Dear user of " Egroups.com " mailing system,

>

> Our antivirus software has detected a large ammount of viruses outgoing

> from your email account, you may use our free anti-virus tool to clean up

> your computer software.

>

> For more information see the attached file.

>

> Best wishes,

> The Egroups.com team

>

>

>

[Guest guest]

Dotsie,

Is it my email address specifically?

I went to the site and I couldn't figure out what to do.

Notify about your e-mail account

utilization.

Dear user, the management of Egroups.com mailing system wants to let you

know that,

Some of our clients complained about the spam (negative e-mail content)

outgoing from your e-mail account. Probably, you have been infected by

a proxy-relay trojan server. In order to keep your computer safe,

follow the instructions.

Please, read the attach for further details.

For security purposes the attached file is password protected. Password is

" 11345 " .

Cheers,

The Egroups.com team

[Guest guest]

What the hell is this? My e mail box has been jammed recently is this part

of it?

Notify about your e-mail account utilization.

>Dear user of " " mailing system,

>

>Your e-mail account will be disabled because of improper using in next

>three days, if you are still wishing to use it, please, resign your

>account information.

>

>For more information see the attached file.

>

>Best wishes,

> The team

http://www.

>

>

>

[Guest guest]

> Dotsie,

> Is it my email address specifically?

>

> I went to the site and I couldn't figure out what to do.

> Notify about your e-mail account

utilization.

>

>

> Dear user, the management of Egroups.com mailing system wants to let you

know that,

>

> Some of our clients complained about the spam (negative e-mail content)

> outgoing from your e-mail account. Probably, you have been infected by

> a proxy-relay trojan server. In order to keep your computer safe,

> follow the instructions.

>

> Please, read the attach for further details.

>

> For security purposes the attached file is password protected. Password is

" 11345 " .

>

I got one of these, the attachment itself is infected. I hope you didn't open

it.

[Guest guest]

Sneaky bastards.

Notify about your e-mail account

utilization.

>

>

> Dear user, the management of Egroups.com mailing system wants to let

you know that,

>

> Some of our clients complained about the spam (negative e-mail

content)

> outgoing from your e-mail account. Probably, you have been infected by

> a proxy-relay trojan server. In order to keep your computer safe,

> follow the instructions.

>

> Please, read the attach for further details.

>

> For security purposes the attached file is password protected. Password

is " 11345 " .

>

I got one of these, the attachment itself is infected. I hope you didn't open

it.