We may have a new scam or virus going on. Just got about twenty emails with zips (subject line: Subject: Your login information has been updated). Supposedly from USdBill Support (sender address and sending server keep changing -- surprise, surprise). Attached zip is call panel_v1.7. The D*.SMD file is about 38kb.
My virus checker isn't finding anything as of 3:20pm, Aug. 15th. Since I don't plan to open up the zip, that's all I've got. John Partial headers from one: Received: from 69-160-110-199.chvlva.adelphia.net [69.160.110.199] by bobcat.jcjc.edu (SMTPD32-8.12) id ADD63540110; Sun, 15 Aug 2004 14:47:34 -0500 Date: Sun, 15 Aug 2004 19:39:48 +0000 From: USdBILL Support <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Your login information has been updated MIME-Version: 1.0 Content-Type: multipart/related; boundary="----------6BB0EAFCAF5716EEAD55FB100" Message-Id: <[EMAIL PROTECTED]> X-Declude-Sender: [EMAIL PROTECTED] [69.160.110.199] X-Declude-Spoolname: Dbdd4035401109344.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: None [0] X-Note: This E-mail was sent from ([69.160.110.199]). --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
