RE: [Declude.JunkMail] ?? Start of phish/virus campaign ??

2006-03-01 Thread Colbeck, Andrew
Thanks, John.

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM%5FB
AGLE%2EDFVSect=T

I didn't see any on my server, but I did find the Trend Micro listing
this morning.

Generating anger or affront in the viewer seems to be the new infection
meme; I just read a blog that mentioned a similar tactic in which the
spam/virus pretends to be a ripped off eBay user.

Andrew 8)
 

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf Of John Carter
 Sent: Tuesday, February 28, 2006 7:18 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] ?? Start of phish/virus campaign ??
 
 Starting to catch EXE attached messages with following 
 subject lines coming (at least currently) MESWILLEY.org 
 [68.63.231.44].
 
 You steal from innocent people
 You are a criminal and will be busted!
 Phshing is illigal
 Where did you learn to scam?
 
 John C
 9:15p CST 

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To 
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
 type unsubscribe Declude.JunkMail.  The archives can be 
 found at http://www.mail-archive.com.
 
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ?? Start of phish/virus campaign ??

2006-02-28 Thread Dave Doherty

Hi, John-

Thanks.

The address belongs to Comcast and is assigned to Hattiesburg-Laurel, MS.

Please send a complaint to [EMAIL PROTECTED]

-d


- Original Message - 
From: John Carter [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Tuesday, February 28, 2006 10:17 PM
Subject: [Declude.JunkMail] ?? Start of phish/virus campaign ??


Starting to catch EXE attached messages with following subject lines 
coming (at least currently) MESWILLEY.org [68.63.231.44].


You steal from innocent people
You are a criminal and will be busted!
Phshing is illigal
Where did you learn to scam?

John C
9:15p CST

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] ?? Start of phish/virus campaign ??

2006-02-28 Thread Marc Catuogno
I got this one:

htmlbody
Hi!br brJust  to inform you that your email  is used by  a  spamer  who
intendsbrto steal bank account information thru a fake site.br brIf
you are not involded, I can bring you additionnal information.  Check
attached file for a  proof.br brIf you are,  you're a  little  son of a
bitch.brbr

br
/body/html

--JHYRUPLXCQFFELGFCEOR
Content-Type: application/octet-stream; name=proof.exe
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=proof.exe

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Carter
Sent: Tuesday, February 28, 2006 10:18 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ?? Start of phish/virus campaign ??

Starting to catch EXE attached messages with following subject lines coming
(at least currently) MESWILLEY.org [68.63.231.44].

You steal from innocent people
You are a criminal and will be busted!
Phshing is illigal
Where did you learn to scam?

John C
9:15p CST 
   
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.