Forum Moderators: phranque
Dear user of "Mydomain.com" mailing system,Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions.
Please, read the attach for further details.
For security purposes the attached file is password protected. Password is "05706".
Sincerely,
The Mydomain.com team
[mydomain.com<...]These messages had viruses attached to them, which my server-level filters removed before delivery.
My question is, can I track down where these are coming from and get their ISP to shut them down? Or, is there anything else that can be done? This is very annoying, as my site offers free webmail to our visitors and some of them are complaining about getting these messages. They're sure not from us, but how can I stop them?
Thanks,
Matthew
I don't know if that particular one was part of the Netsky worm, which finds email messages on your hard drive and replicates itself to everyone.
After I got that one, which looked so official, I immediately sent a mailing to my mailing list and told them again that WE NEVER SEND ATTACHMENTS. Don't open any attachment unless you are expecting it.
Hopefully no one else got infected by it.
The only defense is up to date DAT files! Good luck staying clean!