Neal, I used to be a earthlink customer, and I found that I got alot of suspisous emails, and I was phished several times. I would go to the earthlink support page and use their instructions for sending them the "header" information from the emails. I would usually get a reply of appreciation. With a large group like earthlink or aol, its a good target for these types. Be careful! On Nov 25, 2005, at 4:52 PM, Neal Hammon wrote:
> Russ- > > In my case, some have viruses, some do not- but it is about time we > all downloaded the spam and virus blockers. > > Neal > > > R. D. Preston wrote: > >> On Nov 25, 2005, at 12:42 PM, Neal Hammon wrote: >> >>> A general message to anyone- >>> >>> Recently I have been receiving messages that were not addressed to >>> me. I ask my server, earthlink, how this could happen. Here is >>> their reply: >>> >>> When the elusive mail Spammer sends out their Bulk mailing they >>> have to try and avoid being caught. To do this they need to keep >>> the To: field from having too many address's, as this would be >>> caught by most servers. To facilitate this they utilize the Bcc: >>> field. This field allows the Spammer to not show all the address's >>> actually being sent to. In doing this the To: field will contain an >>> address that is not yours, therefore confusing the receiver. This >>> is done to make the customer feel as if they were sent the email by >>> accident, thereby generating a reply & letting them know they hit a >>> good address. Your best bet in this situation is to just delete the >>> message & NOT reply to it (especially if it says "Reply to be >>> removed"). >>> >>> Neal Hammon >> >> >> Neal, >> >> I also am an EarthLink customer. I became suspicious of these eMail >> messages, too. >> >> -- Not addressed to me. >> -- Short, phisher-like, overly-friendly or outright rude messages, >> obviously composed to get your attention. >> -- Same size attachment in virtually all messages. >> >> Forwarded all msgs., with full headers, to <fraud at earthlink.net> >> (only for Earthlink accounts), and got the following typical response >> (s): >> >> ************************************** >> EARTHLINK VIRUS BLOCKER MESSAGE STATUS >> ************************************** >> >> MESSAGE DELETED >> >> Virus Detected: W32.Sober.X at mm >> >> Message Details: >> From: Admin at aol.com >> To: globaldirectusa at earthlink.net >> Subject: Registration_Confirmation >> Date: Wed, 23 Nov 2005 00:13:16 UTC >> >> EarthLink Virus Blocker has deleted a message sent to you >> because it was generated by a virus. It was not sent by a >> person, and there was no valid content in the message. >> >> For more information: >> >> http://www.earthlink.net/myaccount/help/virusblocker/#autodelete >> >> ******************* >> Powered by Symantec >> ******************* >> >> >> Regards, >> Russ Preston >> >> >> >> >> | The next meeting of the Louisville Computer Society will >> | be November 22 at Pitt Academy, 6010 Preston Highway. >> | The LCS Web page is <http://www.kymac.org>. >> | List posting address: <mailto:macgroup at erdos.math.louisville.edu> >> | List Web page: <http://erdos.math.louisville.edu/macgroup> >> > > > | The next meeting of the Louisville Computer Society will > | be November 22 at Pitt Academy, 6010 Preston Highway. > | The LCS Web page is <http://www.kymac.org>. > | List posting address: <mailto:macgroup at erdos.math.louisville.edu> > | List Web page: <http://erdos.math.louisville.edu/macgroup> | The next meeting of the Louisville Computer Society will | be November 22 at Pitt Academy, 6010 Preston Highway. | The LCS Web page is <http://www.kymac.org>. | List posting address: <mailto:macgroup at erdos.math.louisville.edu> | List Web page: <http://erdos.math.louisville.edu/macgroup>
