Forum Moderators: phranque

Message Too Old, No Replies

Unusual Spam Messages

Are others getting these? And how can they be stopped?

         

MatthewHSE

5:11 pm on Mar 9, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I'm getting a few spam e-mails to some addresses at two of my domains (they're both related to one another). Here's the gist of the messages, with my domain replaced with "mydomain.com"

Dear user of "Mydomain.com" mailing system,

Some of our clients complained about the spam (negative e-mail content) outgoing from your e-mail account. Probably, you have been infected by a proxy-relay trojan server. In order to keep your computer safe, follow the instructions.

Please, read the attach for further details.

For security purposes the attached file is password protected. Password is "05706".

Sincerely,
The Mydomain.com team
[mydomain.com<...]

These messages had viruses attached to them, which my server-level filters removed before delivery.

My question is, can I track down where these are coming from and get their ISP to shut them down? Or, is there anything else that can be done? This is very annoying, as my site offers free webmail to our visitors and some of them are complaining about getting these messages. They're sure not from us, but how can I stop them?

Thanks,

Matthew

txbakers

5:50 pm on Mar 9, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Not a blessed thing.
I'm glad to see you got that one ALSO.

I don't know if that particular one was part of the Netsky worm, which finds email messages on your hard drive and replicates itself to everyone.

After I got that one, which looked so official, I immediately sent a mailing to my mailing list and told them again that WE NEVER SEND ATTACHMENTS. Don't open any attachment unless you are expecting it.

Hopefully no one else got infected by it.

shylo

12:58 am on Mar 10, 2004 (gmt 0)

10+ Year Member



I have received that same email several times now. Lucky just as txbakers said no attachments were opened. I don't open anything unless I am expecting it. Personally I think these people should be .... well, you know!

SEOMike

5:46 pm on Mar 12, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



There's really no way to track down the sender. Problem is, people send it without knowing it. Lots of times, variants of this virus will seek out vulnerable email systesm and use built in SMTP and send themselves! I have received dozens of these emails from all sorts of different places. One of the clever things they do is address spoofing so the email looks like it came from MSN or CBS or Microsoft... etc etc.

The only defense is up to date DAT files! Good luck staying clean!