ECHURCH-USA Archives

The Electronic Church

ECHURCH-USA@LISTSERV.ICORS.ORG

Options: Use Forum View

Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
Sharon Hooley <[log in to unmask]>
Reply To:
The Electronic Church <[log in to unmask]>
Date:
Wed, 22 Aug 2007 15:39:52 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (76 lines)
Hi all,

this is Sharon speaking now.  I know that we are accustomed to those hoax 
virus warnings.  I just got word from someone, whom I believe is one of the 
moderators of the Dancing Dots List of which I am a member.  Please take a 
look, check it out if you can, and pass it on!  The message is below my 
name.

Sharon

Sorry if you see this many times, but this is a genuine
authenticated warning on my part, and potentially serious.

If you receive any messages similar in format to the one
below my signature, delete them immediately. [I have removed
unsafe matter in the sample] They are easy enough to
recognise as they suggest you have joined something, and
give you a Confirmation Number, Login ID and Temporary
Password.  You are then told to follow a link to an IP
address.

Here is what a highly reliable contact of mine at Microsoft
has said.

"The link takes you to a site using the MPACK toolkit to try
to download a range of malware based around the Win32 Storm
Trojan."

"We are shutting them down as fast as we can but most of the
sites are in eastern europe".

You have been warned, so please delete any such messages
immediately.

George Bell.

Sample message follows:-

-----Original Message-----
From: User [address deleted] On Behalf Of [Deleted]
Sent: Wednesday, August 22, 2007 6:50 AM
To:
Subject: Membership Support [but Subject varies]

Welcome Member,

Welcome To Office Antics.

Confirmation Number: 74753533
Login ID: user8196
Temorary Password: in555

Please Change your login and change your Login Information.

Follow this link, or paste it in your browser: [Link to an
IP address deleted]

Enjoy,
Membership Support Department
Office Antics

** To leave the list, click on the immediately-following link:-
** [mailto:[log in to unmask]]
** If this link doesn't work then send a message to:
**
[log in to unmask]
** and in the Subject line type
** unsubscribe
** For other list commands such as vacation mode, click on the
** immediately-following link:-
** [mailto:[log in to unmask]úq]
** or send a message, to
**
[log in to unmask]
with the Subject:- faq

ATOM RSS1 RSS2