Re: Interesting email thread with passworded zip file
From: kulm_nd (kn_at_NOISP.net)
Date: Wed, 03 Mar 2004 05:17:51 GMT
My ISP has already posted warnings, a virus/trojan for sure.
-- ************************************************ g-w "Leythos" <email@example.com> wrote in message news:MPG.firstname.lastname@example.org... > Tonight I was pulling email from the account I list in my sig (it's a > disposable account) and got two email's telling me that my email account > had been deactivated and that the details where in an attached Zip file. > One thing to note, the account still works fine. Both Zip files were > different names, but were sent from the same email server. > > I called RR and they know nothing about it, I warned them and sent the > file to email@example.com so they could be on the lookout for it too. > > Now, I'm not anywhere stupid enough to open a passworded Zip file, and > not stupid enough to fall for this childish crap, but I thought I would > post this out there in case anyone else gets something like this: > > Return-Path: <2484R.M.R.Para9mm@webtv.net> > Received: from mx3.biz.rr.com ([192.168.201.29]) by fep05.biz.rr.com > (InterMail vM.5.01.03.06 201-253-122-118-106-20010523) with > ESMTP > id <20040303044106.IBVS1002.firstname.lastname@example.org> > for <email@example.com>; Tue, 2 Mar 2004 23:41:06 -0500 > Received: from Hours (hours.micro.uiuc.edu [22.214.171.124]) > by mx3.biz.rr.com (8.12.10/8.12.10) with SMTP id i234f5U4002896 > for <firstname.lastname@example.org>; Tue, 2 Mar 2004 23:41:05 -0500 (EST) > Date: Tue, 02 Mar 2004 22:42:21 -0600 > To: email@example.com > Subject: E-mail account security warning. > From: firstname.lastname@example.org > Message-ID: <email@example.com> > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="--------xxlqmnigdawgslfadase" > > Dear user of Rrohio.com gateway e-mail server, > > Your e-mail account has been temporary disabled because of > unauthorized access. > > Please, read the attach for further details. > > Attached file protected with the password for security reasons. > Password is 01747. > > Kind regards, > The Rrohio.com team > http://www.rrohio.com > > > -- > -- > firstname.lastname@example.org > (Remove 999 to reply to me)