Discussion:
"Returned mail: Data format error" - Spam?
(too old to reply)
Captain Button
2004-10-19 14:37:52 UTC
Permalink
I just got an email which I assume is some spammer trying to trick me into
letting him take over my computer:

I've only viewed this over the webmail interface, and haven't done
anything with the attachment "file.com".

(And that there is no mention of PrismNet is a bit of a hint.)

Just checking and/or warning others.

Email recieved:
Return-Path: <***@io.com>
Received: from io.com (216-12-52-146.access.ntelos.net [216.12.52.146])
by webmail.io.com (8.12.8/8.12.8) with ESMTP id i9JE1Kmm007503
for <***@io.com>; Tue, 19 Oct 2004 09:01:30 -0500
Message-Id: <***@webmail.io.com>
From: "Bounced mail" <***@io.com>
To: ***@io.com
Subject: Returned mail: Data format error
Date: Tue, 19 Oct 2004 09:59:49 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_A0FEE9A2.44466004"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Subject: Returned mail: Data format error
From: "Bounced mail" <***@io.com>
Date: Tue, October 19, 2004 8:59 am
To: ***@io.com
Priority: Normal

Dear user ***@io.com,

We have received reports that your account has been used to send a huge
amount of
spam messages during this week.
Most likely your computer was infected and now contains a hidden proxy
server.

Please follow our instruction in order to keep your computer safe.

Have a nice day,
The io.com team.

<<<
--
Once is happenstance.
Twice is coincidence.
Four times is enemy action.
BOMB MARS NOW! [ Captain Button - ***@io.com ]
Lars Eighner
2004-10-19 20:07:44 UTC
Permalink
In our last episode,
<Ho-dnZ5oK-Vdu-jcRVn-***@io.com>,
the lovely and talented Captain Button
Post by Captain Button
I just got an email which I assume is some spammer trying to trick me into
I've only viewed this over the webmail interface, and haven't done
anything with the attachment "file.com".
Trash it; it is a virus. Where have you been that you haven't got
hundreds of these already? So are the ones claiming to be pictures
of you naked, etc., etc. They may also appear to come from friends,
or as returns of mail you have sent friends. Also, those notes that
you need to verify information to keep your bank account, credit
card, paypal, etc. which come with a "convenient" link - well, they
aren't viruses, but the link doesn't go where it says it goes.

There simply are *no* legitimate attachments to unexpected emails,
and all legitimate businesses who need information from you will
ask you to log into a secure web site at an address you enter
in your browser by hand, not a link you follow from the mail.
--
Lars Eighner -finger for geek code- ***@io.com http://www.io.com/~eighner/
If it wasn't for muscle spasms, I wouldn't get any exercise at all.
Captain Button
2004-10-19 20:15:56 UTC
Permalink
Wild-eyed conspiracy theorists insist that on Tue, 19 Oct 2004 15:07:44
Post by Lars Eighner
In our last episode,
the lovely and talented Captain Button
Post by Captain Button
I just got an email which I assume is some spammer trying to trick me into
I've only viewed this over the webmail interface, and haven't done
anything with the attachment "file.com".
Trash it; it is a virus. Where have you been that you haven't got
hundreds of these already? So are the ones claiming to be pictures
of you naked, etc., etc. They may also appear to come from friends,
or as returns of mail you have sent friends. Also, those notes that
you need to verify information to keep your bank account, credit
card, paypal, etc. which come with a "convenient" link - well, they
aren't viruses, but the link doesn't go where it says it goes.
I've got plenty of those, or rather I've deleted plenty of those. This
one was a slightly different take on things and I wasn't certain, merely
deeply suspicious.
Post by Lars Eighner
There simply are *no* legitimate attachments to unexpected emails,
and all legitimate businesses who need information from you will
ask you to log into a secure web site at an address you enter
in your browser by hand, not a link you follow from the mail.
--
Once is happenstance.
Twice is coincidence.
Four times is enemy action.
BOMB MARS NOW! [ Captain Button - ***@io.com ]
Loading...