[TechAssist] Re: Warning- watch out for fake RETURNED MAIL messages in your inboxes
- From: Bil Green <tv.vcrrepair@xxxxxxxxxxx>
- To: Gary McCartney <techassist@xxxxxxxxxxxxx>
- Date: Wed, 20 Aug 2003 12:07:27 -0700
Hi Gary,
Thanks for the warning. This would be one of the easiest mistakes for
someone that sends out a lot of e-mails. Up till now I have always
trusted e-mails titled "Returned Mail".
--
Best regards,
Bil Green
2001 TV VCR
Mammoth Lakes, CA 93546
760-934-2001 mailto:tv.vcrrepair@xxxxxxxxxxx
Wednesday, August 20, 2003, 11:54:38 AM, you wrote:
GM> I just got an email entitled: "Returned mail: see transcript for
GM> details"
GM> See copy below (minus the attachment of course). I never sent this email
GM> to the addressee and I never attached a file called "Your document.pif"
GM> This is obviously a worm ready to be executed if I would click on the
GM> file, which I won't. I will delete the email instead.
GM> I figured it is important to let the list members know about this before
GM> anyone accidently clicks on a file in a similar type of email.
GM> Gary McCartney
GM> McCartney Electronics
GM> Guelph Ontario Canada
GM> Est. 1984
GM> email: gary (at) number63.ca
GM>
-------------------------------------------------------------------------------------------------
GM> COPY OF EMAIL:
GM> Subject: Returned mail: see transcript for details
GM> Date:
GM> Wed, 20 Aug 2003 20:42:04 +0200
GM> From:
GM> Mail Delivery Subsystem <MAILER-DAEMON@xxxxxxxxxxxx>
GM> To:
GM> <gary@xxxxxxxxxxx>
GM> The original message was received at Wed, 20 Aug 2003 20:41:56 +0200
GM> from adsl-65-65-202-89.dsl.stlsmo.swbell.net [65.65.202.89]
GM> ----- The following addresses had permanent fatal errors -----
GM> <gyeublitzkrieg24@xxxxxxx>
GM> (reason: 550 unknown user <gyeublitzkrieg24@xxxxxxx>)
GM> ----- Transcript of session follows -----
GM> ... while talking to mail.comb.es.:
>>>> RCPT To:<gyeublitzkrieg24@xxxxxxx>
GM> <<< 550 unknown user <gyeublitzkrieg24@xxxxxxx>
GM> 550 5.1.1 <gyeublitzkrieg24@xxxxxxx>... User unknown
GM> Reporting-MTA: dns; webs.comb.es
GM> Received-From-MTA: DNS; adsl-65-65-202-89.dsl.stlsmo.swbell.net
GM> Arrival-Date: Wed, 20 Aug 2003 20:41:56 +0200
GM> Final-Recipient: RFC822; gyeublitzkrieg24@xxxxxxx
GM> Action: failed
GM> Status: 5.1.1
GM> Remote-MTA: DNS; mail.comb.es
GM> Diagnostic-Code: SMTP; 550 unknown user <gyeublitzkrieg24@xxxxxxx>
GM> Last-Attempt-Date: Wed, 20 Aug 2003 20:42:04 +0200
GM> Subject:
GM> Re: Approved
GM> Date:
GM> Wed, 20 Aug 2003 12:59:19 --0500
GM> From:
GM> <gary@xxxxxxxxxxx>
GM> To:
GM> <gyeublitzkrieg24@xxxxxxx>
GM> See the attached file for details
GM> your_document.pif
GM> Name:
GM> your_document.pif
GM> Type:
GM> Shortcut to MS-DOS Program
GM> (application/x-unknown-content-type-piffile)
GM> Encoding:
GM> base64
GM> --
GM>
*****************************************************************************
GM> Classifieds! Buy or Sell!
GM> http://sell.tech-assist.org
GM> The Tech Address Book:
GM> http://www.tech-assist.org/secure/tip/contact.htm
GM> Add a Repair Tip Here, or Change/Remove your Email Address:
GM> http://www.tech-assist.org/secure/tip/main.htm
GM> Lost Password:
GM> http://www.tech-assist.org and select "Lost your Login Info?".
GM> Email Archives:
GM> //www.freelists.org/archives/techassist/
*****************************************************************************
Classifieds! Buy or Sell!
http://sell.tech-assist.org
The Tech Address Book:
http://www.tech-assist.org/secure/tip/contact.htm
Add a Repair Tip Here, or Change/Remove your Email Address:
http://www.tech-assist.org/secure/tip/main.htm
Lost Password:
http://www.tech-assist.org and select "Lost your Login Info?".
Email Archives:
//www.freelists.org/archives/techassist/
Other related posts:
