Help identifying virus
in [Windows XP]
|
Prev: chkdsk - what the heck
Next: Power Supply
From: HeyBub on 8 Feb 2010 17:39 I get an email. Almost instantly another email "arrives" with the same subject but containing the following text: --- begin quote Hello How are you doing recently? I would like to introduce you a very good company which i knew. Their website is www.ebakm.com They can offer you all kinds of electronical products which you need,like Laptops ,GPS ,TV LCD,Cell Phones,PS3,MP3/4,Watch etc........ Please take some time to have a check ,there must be something you 'd like to purchase . Hope you have a good mood in shopping from their company ! Best Regards!!! --- end quote I suspect it's a virus existing locally because the headers make no sense and SpamCop agrees that the header is incomplete/missing. Resident Avast has never complained and online scanning by both McCaffee and another found nothing. It's a mystery. Thanks for your help.
From: David H. Lipman on 8 Feb 2010 17:56 From: "HeyBub" <heybub(a)gmail.com> | I get an email. Almost instantly another email "arrives" with the same | subject but containing the following text: | --- begin quote | Hello | How are you doing recently? | I would like to introduce you a very good company which i knew. Their | website is www.ebakm.com They can offer | you all kinds of electronical products which you need,like Laptops ,GPS ,TV | LCD,Cell Phones,PS3,MP3/4,Watch etc........ | Please take some time to have a check ,there must be something you 'd like | to purchase . | Hope you have a good mood in shopping from their company ! | Best Regards!!! | --- end quote | I suspect it's a virus existing locally because the headers make no sense | and SpamCop agrees that the header is incomplete/missing. | Resident Avast has never complained and online scanning by both McCaffee and | another found nothing. | It's a mystery. | Thanks for your help. It's spam. Either post the headers (obfuscating personal information) or just delete it and forget about it. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: HeyBub on 8 Feb 2010 18:36 David H. Lipman wrote: > From: "HeyBub" <heybub(a)gmail.com> > >> I get an email. Almost instantly another email "arrives" with the >> same subject but containing the following text: > >> --- begin quote >> Hello > >> How are you doing recently? > >> I would like to introduce you a very good company which i knew. Their > >> website is www.ebakm.com They can offer > >> you all kinds of electronical products which you need,like Laptops >> ,GPS ,TV LCD,Cell Phones,PS3,MP3/4,Watch etc........ > >> Please take some time to have a check ,there must be something you >> 'd like to purchase . > >> Hope you have a good mood in shopping from their company ! > >> Best Regards!!! > >> --- end quote > > > >> I suspect it's a virus existing locally because the headers make no >> sense and SpamCop agrees that the header is incomplete/missing. >> Resident Avast has never complained and online scanning by both >> McCaffee and another found nothing. > >> It's a mystery. >> Thanks for your help. > > > It's spam. > > Either post the headers (obfuscating personal information) or just > delete it and forget about it. Of course it's spam, but not really inasmuch as it wasn't sent as an email. To restate the circumstances of its appearence: I get an email from a known source, then, almost instantly, another email "arrives" with exactly the same subject line as the righteous email but containing the aformentioned text as the body. The headers (probably) won't help. Here is a complete header, for what it's worth: --- begin "header" Date: Mon, 8 Feb 2010 07:46:57 -0800 From: "(xxxxxx)" <(my name)> To: campaign(a)proflowers.com Message-ID: <63c388041002080746l16d91228v(a)mail.gmail.com> Subject: Hello Re: Thank you for your ProFlowers order: xxxxxxxx MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Content-Disposition: inline Precedence: bulk X-Autoreply: yes --- end header I get one of these on about half the legit emails. So far I haven't established a pattern.
From: PA Bear [MS MVP] on 8 Feb 2010 18:44 Create a Message Rule that will automatically move such messages to Deleted Items folder and mark it as Read. Then delete the message(s) without opening them (of course). Message Rules Tips http://www.insideoe.com/tips/rules.htm Why doesn't my rule work? http://www.insideoe.com/faqs/why.htm#rules HeyBub wrote: > I get an email. Almost instantly another email "arrives" with the same > subject but containing the following text: > > --- begin quote > Hello > > How are you doing recently? > > I would like to introduce you a very good company which i knew. Their > > website is www.ebakm.com They can offer > > you all kinds of electronical products which you need,like Laptops ,GPS > ,TV > LCD,Cell Phones,PS3,MP3/4,Watch etc........ > > Please take some time to have a check ,there must be something you 'd like > to purchase . > > Hope you have a good mood in shopping from their company ! > > Best Regards!!! > > --- end quote > > > > I suspect it's a virus existing locally because the headers make no sense > and SpamCop agrees that the header is incomplete/missing. > > > > Resident Avast has never complained and online scanning by both McCaffee > and > another found nothing. > > > > It's a mystery. > > > > Thanks for your help.
From: HeyBub on 8 Feb 2010 21:05
PA Bear [MS MVP] wrote: > Create a Message Rule that will automatically move such messages to > Deleted Items folder and mark it as Read. Then delete the message(s) > without opening them (of course). > > Message Rules Tips > http://www.insideoe.com/tips/rules.htm > > Why doesn't my rule work? > http://www.insideoe.com/faqs/why.htm#rules > Thanks for the advice. I can already get rid of them. My question is not what to do with these oddball messages when they "arrive," but what causes them in the first place. |