[TechAssist] Re: Warning- watch out for fake RETURNED MAIL messages in your inboxes
- From: walter wood <wwood_38478@xxxxxxxxx>
- To: techassist@xxxxxxxxxxxxx
- Date: Wed, 20 Aug 2003 12:08:42 -0700 (PDT)
I've already gotten 3 of these today.
Norton took care of it.
Walter
--- Gary McCartney <gary@xxxxxxxxxxx> wrote:
> I just got an email entitled: "Returned mail:
> see transcript for
> details"
>
>
> See copy below (minus the attachment of course).
> I never sent this email
> to the addressee and I never attached a file
> called "Your document.pif"
>
> This is obviously a worm ready to be executed if
> I would click on the
> file, which I won't. I will delete the email
> instead.
>
> I figured it is important to let the list members
> know about this before
> anyone accidently clicks on a file in a similar
> type of email.
>
>
> Gary McCartney
>
> McCartney Electronics
> Guelph Ontario Canada
> Est. 1984
> email: gary (at) number63.ca
>
>
>
-------------------------------------------------------------------------------------------------
>
>
> COPY OF EMAIL:
>
> Subject: Returned mail: see transcript for
> details
> Date:
> Wed, 20 Aug 2003 20:42:04 +0200
> From:
> Mail Delivery Subsystem
> <MAILER-DAEMON@xxxxxxxxxxxx>
> To:
> <gary@xxxxxxxxxxx>
>
>
>
>
> The original message was received at Wed, 20 Aug
> 2003 20:41:56 +0200
> from adsl-65-65-202-89.dsl.stlsmo.swbell.net
> [65.65.202.89]
>
> ----- The following addresses had permanent
> fatal errors -----
> <gyeublitzkrieg24@xxxxxxx>
> (reason: 550 unknown user
> <gyeublitzkrieg24@xxxxxxx>)
>
> ----- Transcript of session follows -----
> ... while talking to mail.comb.es.:
> >>> RCPT To:<gyeublitzkrieg24@xxxxxxx>
> <<< 550 unknown user <gyeublitzkrieg24@xxxxxxx>
> 550 5.1.1 <gyeublitzkrieg24@xxxxxxx>... User
> unknown
>
>
>
>
> Reporting-MTA: dns; webs.comb.es
> Received-From-MTA: DNS;
> adsl-65-65-202-89.dsl.stlsmo.swbell.net
> Arrival-Date: Wed, 20 Aug 2003 20:41:56 +0200
>
> Final-Recipient: RFC822; gyeublitzkrieg24@xxxxxxx
> Action: failed
> Status: 5.1.1
> Remote-MTA: DNS; mail.comb.es
> Diagnostic-Code: SMTP; 550 unknown user
> <gyeublitzkrieg24@xxxxxxx>
> Last-Attempt-Date: Wed, 20 Aug 2003 20:42:04
> +0200
>
>
> Subject:
> Re: Approved
> Date:
> Wed, 20 Aug 2003 12:59:19 --0500
> From:
> <gary@xxxxxxxxxxx>
> To:
> <gyeublitzkrieg24@xxxxxxx>
>
>
>
> See the attached file for details
>
>
>
> your_document.pif
>
> Name:
> your_document.pif
> Type:
> Shortcut to MS-DOS
> Program
> (application/x-unknown-content-type-piffile)
> Encoding:
> base64
> --
>
>
*****************************************************************************
> Classifieds! Buy or Sell!
> http://sell.tech-assist.org
> The Tech Address Book:
> http://www.tech-assist.org/secure/tip/contact.htm
> Add a Repair Tip Here, or Change/Remove your
> Email Address:
> http://www.tech-assist.org/secure/tip/main.htm
> Lost Password:
> http://www.tech-assist.org and select "Lost your
> Login Info?".
> Email Archives:
> //www.freelists.org/archives/techassist/
=====
Walter Wood
Future Tech Home Center
2786 Hwy. 43 N.
Lawrenceburg Tn. 38464
931-829-3337
Fax 931-829-4044
mailto:wwood_38478@xxxxxxxxx
__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
*****************************************************************************
Classifieds! Buy or Sell!
http://sell.tech-assist.org
The Tech Address Book:
http://www.tech-assist.org/secure/tip/contact.htm
Add a Repair Tip Here, or Change/Remove your Email Address:
http://www.tech-assist.org/secure/tip/main.htm
Lost Password:
http://www.tech-assist.org and select "Lost your Login Info?".
Email Archives:
//www.freelists.org/archives/techassist/
Other related posts:
