Giveaway of the Day Forums

1. 

   Whiterabbit-uk
   Games Guru

   I've just received a couple of emails from community members telling me of an email that I was supposed to have sent out. It definitely wasn't from me. I cannot fathom how this has happened; but to be on the safe side please do not open any emails from my Whiterabbit-uk hotmail account. I will be working through all my email addy's (there's hundreds) and sending you all an email from a safe email, which i won't print here.

   It's been an extraordinarily hard day for me a si've had an hospital appointment this morning, shopping and post office over lunch then a dental appointment in the qafternoon. fo me that's very unusual and it's knocked the stuffing out of me. nmoreso because I've not been well over the last few days. so it's going to take me a couple of days to work through all of the emails as I will be sending individual Emails to everyone.

   I'm sorry if it's compromised anyones computers. I can only assume my email has been ripped from one of the sites because Io use the same password for my Email and log on for quite a few sites. I visit or someone has sold my email on somehow.

   I always run a firewall and antivirus program, so don't think it's arisen directly from my own computer.

   Posted 13 years ago #
2. 

   RosnSC
   Member

   WR, was tubely.com involved in any of those emails? I got an email from that web site, yesterday, that supposedly was sent by my SIL, who is on my contacts list. She didn't send it. Those who got those emails, ask them if that is in them. If it is, just send it to their Spam folders.

   Posted 13 years ago #
3. 

   Violet4714
   Member

   @WR...

   please check your PM's for mine...thanks...

   Posted 13 years ago #
4. 

   Dragonlair
   Member

   It sounds like spoofing! I see that on the EMS board's email addy from time to time. Somehow they manage to send out emails as if they were someone else and you get stuck with all the daemons and angry returns. Fortunately, they go on to someone else pretty quick.

   Posted 13 years ago #
5. 

   notblocklox
   retired

   Thanks, Rabbit, this must have been one of those days you can say: it never rains but it pours.

   You should change your passwords now, as you have told everyone that you mostly use only one - LOL. It is sooo convenient with only one password....I know, I know....

   I have got KeePass Password Safe now.

   Take care!

   graylox

   Posted 13 years ago #
6. 

   Robert
   StrayCat

   No fake rabbits over here,Stephen...

   It might be interesting if you could take a look at the headers of those fakes.

   Posted 13 years ago #
7. 

   Violet4714
   Member

   >>>mods: please delete if you find this unsafe in any way, thank you...
   _____________________

   i received an email...as usual, i couldn't stand not knowing...you have all heard of my self-inflicted wounds before...

   i do NOT recommend anyone else follow my dumb lead...even tho' no alarms went off on my pc...

   i put a space into the web address so it couldn't accidentally be clicked...

   _____________________

   note: website in Spam email is rated yellow by WOT! WOT page:

   http://www.mywot.com/en/scorecard/yong-rong.info

   _____________________

   subject of email i received:
   discount news : $-93

   email:
   discount news :
   Happy South Africa's World Cup!Stay Cool With w ww.XXXXXX. info

   My friend said to me that the site is doing promotions for the South Africa's World Cup in these days ,do you know ?i think the Website can be tested,because I have bought some ,that company mainly sell all kinds of MP3,TV,Motorbike,Cellphone,Laptop etc,during the South Africa's World Cup ,their products price is very favorable,you can buy their products as soon as possible ,after the South Africa's World Cup ,they will cancel this discount ,i think it is a big chance for every people to buy them.
   the company trys to build elite teams and their company's belief is a win-win,the mainly reason why their products price is very low is that they want to get into the international market,so i hope every people can check the w ww.XXXXXX. info

   to get your goods and cheaper products ,good luck ,Greeting !
   $-94

   _____________________

   @graylox: i have slacked off on my WOT reporting...this was a good reminder...

   @Robert: WR received what i could find : )

   @WR: i think only my ability to read was compromised...my pc has been fine...and no more fake rabbits here, either... : )

   Posted 13 years ago #
8. 

   copmom
   Member

   I got the same email from white rabbit too, and figured since he sent it I should click on the site, which I did since it must be OK. Nothing (thankfully) happened, and there wasn't anything there I needed so I just deleted it. But, my neighbors machine has gone to the shop yesterday because of something that was in one of the emails he received and the was unable to get his emails at all. So, something's going on!

   This is a copy/paste of the header on that email followed by a list of Stephen's address book which I'm not putting in here.. but said From: Sxxx Bxxx .. maybe one of you would know how to use this info?:

   Received: from bay0-omc2-s19.bay0.hotmail.com (bay0-omc2-s19.bay0.hotmail.com [65.54.190.94])
   by host3.siliconmountains.net (8.12.11.20060614/8.12.10) with ESMTP id o6EDoLRR018973
   14 Jul 2010 09:50:22 -0400
   Received: from BAY117-W8 ([65.54.190.125]) by bay0-omc2-s19.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
   Wed, 14 Jul 2010 06:49:09 -0700
   Message-ID: <BAY117-W83F0FB8AC3FF740703CCAC8BA0@phx.gbl>
   Content-Type: multipart/alternative;
   boundary="_6672ddb5-d044-4942-8a0f-b09cba7aad63_"
   X-Originating-IP: [115.49.39.74]
   From: Sxxx Bxxx <wxxx-uk@hotmail.co.uk>

   ................

   EDIT

   I deleted the name.
   graylox

   Posted 13 years ago #
9. 

   Buckleysmom
   Member

   Sorry to here about your troubles, Stephen, both medical and email. Hope things get better real fast.

   Hugs
   BK

   Posted 13 years ago #
10. 

    notblocklox
    retired

    http://scanner.novirusthanks.org/analysis/1cec9542d634ff42e028b4219ac4bb5e/aW5kZXg=/

    An offline scan didn't find any threat when looking at that side.

    You may give them your rating on:

    http://www.mywot.com/en/scorecard/yong-rong.info

    graylox

    EDIT:

    When googling that name, you'll see, that they have hacked other email accounts too.
    One example :
    http://www.google.co.uk/support/forum/p/gmail/thread?tid=3e1e672cc68e3395&hl=en

    Posted 13 years ago #
11. 

    GMMan, Hexadecimal Blacksmith
    Blocked

    It looks like the email really came from Hotmail's servers.

    @Whiterabbit: Do you use Hotmail online, or do you also use an email program? If the former, changing your password should be sufficient. If the latter, you'll want to do a malware scan.

    (Psst... Copmom! You should obfuscate Whiterabbit's email address/delete it from your header dump.)

    EDIT: Did it.
    graylox

    Posted 13 years ago #
12. 

    notblocklox
    retired

    Hopefully we didn't make the wreaked damage even worse when mentioning the names and addresses here. I edited some names, but OTOH WR himself mentioned his email account.
    Some time ago I got the first spam mail from WR's account, I thought it was some mistake and just deleted it; don't remember, if it was the same spammer.
    My advice to all involved: change your passwords.

    Posted 13 years ago #
13. 

    Whiterabbit-uk
    Games Guru

    Thaanks for contacting me so quick. I changed the passwords on all of my emails as soon as I'd read your email. Thankfully I've not got any angry replies as everyone knows i'd never send such rubbish. :) Once i've contacted everyone via the account i mention above it will be closed. It was about time anyway as I get at least a page of spam every day. that doesn't make the spam filter.

    Posted 13 years ago #
14. 

    GMMan, Hexadecimal Blacksmith
    Blocked

    Gmail seems to handle my spam just fine. Some of the more legitimate things can get thrown in there, but it doesn't bother me. (The only legitimate thing I see that gets thrown with the spam are eWeek surveys, which I don't miss.)

    Posted 13 years ago #
15. 

    RosnSC
    Member

    BTW, WR, I forgot to include that I haven't received any emails from your hotmail address.

    Posted 13 years ago #
16. 

    GMMan, Hexadecimal Blacksmith
    Blocked

    Needless to say, I don't know his email address, and he doesn't know mine, so I haven't received anything except my regular stream of junk that gets filtered out (which I wonder where it comes from in the first place...).

    Posted 13 years ago #
17. 

    goodgotd
    Member

    No attachments, but as soon as I saw that list of CC: emails I knew it was bogus even before I got to the body of the message. When I got to that part, it just clinched it as a fake, hack, or whatever.

    I'll put that email addy in a filter to put anything from it in my spam folder, and keep an eye out to see how it shapes. luckily I filter on other criteria than the TO: field, so my email addy is just fine. Funny how some of those addresses were associated with names, and others with things like: "giveaway sent info about reg"

    that was a hoot. for that matter I may just filter on some of the other headers in case you get control again.

    I didn't think the Message-ID: <BAY117-W1xxxxxxxxxxxxxC8BA0@phx.gbl> in the headers made sense either.

    Posted 13 years ago #
18. 

    Anonymous
    Unregistered

    I always run a firewall and antivirus program, so don't think it's arisen directly from my own computer.
    well on my PC the same but I fit COMODO firewall & Trend Micro RUBotted then in a few day it said 5 lot's of spam is going out don't know way firewall not stop did a scan with SuperSpyware found the spyware & it fix you may like to try to be on the safe side & it free

    Posted 13 years ago #
19. 

    GMMan, Hexadecimal Blacksmith
    Blocked

    @goodgotd: the Message-ID tag changes depending on your receiving email provider. You are using PHX, therefore PHX shows up in the Message-ID tag. (Verified with my other, legitimate emails.)

    Posted 13 years ago #
20. 

    triphammer
    Member

    Anybody who clicked on something in a malicious e-mail should scan their systems IMO.

    Posted 13 years ago #
21. 

    goodgotd
    Member

    Thanks, GMMAN- been so long I've had any email I've been uncertain of that I've lost track of what headers to look at.

    Posted 13 years ago #
22. 

    pavid
    gamer extraordinaire & knowledgeable computer nerd who likes to argue, but is still a very nice guy

    Stupid rabbit pellets!!! How am I supposed to get rid of all this ....?? Stupid rabbits, tricks are for kids. LOL Love ya man!!

    Posted 13 years ago #

RSS feed for this topic

Reply

You must log in to post.