HotPOP.com infected

HotPOP.com infected

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
HotPOP.com infected roberto 07-01-2005
---> Re: HotPOP.com infected What's in a Nam...07-01-2005
Posted by David H. Lipman on July 1, 2005, 5:47 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Perhaps i should quit this....or maybe get a better lessons of English LOL
|
| Im not worried about getting infected....i have not problem with this....im
| concerning about this: HotPOP.com is afected by Mytob worm . Im receiving
| some messages from support@hotpop.com webmaster@hotpop.com with the known
| subjects YOUR PASSWORD HAS SUCESFULLY CHANGED...among others. I configured
| my OE to acccess to this account on HotPOP using the POP services this site
| offers...but now that i know the site is afected by mytob i "tried" to save
| my messages and save me in some way ...in a future....changing the feature
| of POP service for a FORWARDING Service. So, i used a yahoo account with POP
| option i have on www.yahoo.com.mx as a filter. If Hotpop site is afected
| then all the messages i receive THERE will be automatically infected??? So,
| then Yahoo will delete my messages....
|
| I think i will lost part of my e -mails.....trying to made the good
| thing...


I think you may find that the email from addresses are forged.

This is a well known Social Enginerring trick to to get yuou infected by making
it seem like
it came from a legitimate source.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by roberto on July 1, 2005, 9:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
: 7bit


<html>
<body>
<BR><STRONG>Dear Hotpop Member, </STRONG><BR>
<BR>Your e-mail account was used to send a huge amount of unsolicited spam
messages during the recent week. If you could please take 5-10 minutes out
of your online experience and confirm the attached document so you will not
run into any future problems with the online service.<BR>
<BR>If you choose to ignore our request, you leave us no choice but to
cancel your membership.<BR>
<BR>Virtually yours,
<BR>The Hotpop Support Team <BR>
<BR><BR><BR><BR><BR>
<BR>+++ Attachment: No Virus found
<BR>+++ Hotpop Antivirus - www.hotpop.com
</body>
</html>



------=_NextPart_000_0001_F3B9E1FB.FB56ADFE
Content-Type: text/plain; x-avg=cert; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "AVG certification"

Viruses found in the attached files.
The file important-details.zip: Virus identified I-Worm/Mytob.KS. The
attac=
hment was moved to the virus vault.

Checked by AVG Anti-Virus.
Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 01/07/2005

------=
Posted by Tom Pepper Willett on July 1, 2005, 7:26 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
: 7bit
|
|
| <html>
| <body>
| <BR><STRONG>Dear Hotpop Member, </STRONG><BR>
| <BR>Your e-mail account was used to send a huge amount of unsolicited spam
| messages during the recent week. If you could please take 5-10 minutes out
| of your online experience and confirm the attached document so you will
not
| run into any future problems with the online service.<BR>
| <BR>If you choose to ignore our request, you leave us no choice but to
| cancel your membership.<BR>
| <BR>Virtually yours,
| <BR>The Hotpop Support Team <BR>
| <BR><BR><BR><BR><BR>
| <BR>+++ Attachment: No Virus found
| <BR>+++ Hotpop Antivirus - www.hotpop.com
| </body>
| </html>
|
|
|
| ------=_NextPart_000_0001_F3B9E1FB.FB56ADFE
| Content-Type: text/plain; x-avg=cert; charset=us-ascii
| Content-Transfer-Encoding: quoted-printable
| Content-Disposition: inline
| Content-Description: "AVG certification"
|
| Viruses found in the attached files.
| The file important-details.zip: Virus identified I-Worm/Mytob.KS. The
| attac=
| hment was moved to the virus vault.
|
| Checked by AVG Anti-Virus.
| Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 01/07/2005
|
| ------=
Posted by N. Miller on July 2, 2005, 2:33 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On Fri, 1 Jul 2005 19:39:51 -0400, roberto wrote:

> Im not worried about getting infected....i have not problem with this....im
> concerning about this: HotPOP.com is afected by Mytob worm . Im receiving
> some messages from support@hotpop.com webmaster@hotpop.com with the known
> subjects YOUR PASSWORD HAS SUCESFULLY CHANGED...among others. I configured
> my OE to acccess to this account on HotPOP using the POP services this site
> offers...but now that i know the site is afected by mytob i "tried" to save
> my messages and save me in some way ...in a future....changing the feature
> of POP service for a FORWARDING Service. So, i used a yahoo account with POP
> option i have on www.yahoo.com.mx as a filter. If Hotpop site is afected
> then all the messages i receive THERE will be automatically infected??? So,
> then Yahoo will delete my messages....

So you will have your HotPOP email forwarded to Yahoo! Mail, Mexico. I
don't know if yahoo.co.mx works exactly like yahoo.com. What I have with a
yahoo.com account is SpamGuard, and the Yahoo! AV program. Yahoo! AV is
strictly hit or miss. When it hits, it only catches viral email, and you
get a notice akin to this:

--------------------------------------
|To: ***@pacbell.net
|Date: Mon, 06 Dec 2004 10:48:55 -0800
|Subject: "Alert: Virus Detected but not Cleaned - Attachment Removed" [E-mail
technical support warning.]
|MIME-Version: 1.0
|Content-Type: multipart/mixed;
| boundary="0-1127678671-1102359134-52518"
|
|--0-1127678671-1102359134-52518
|Content-Type: text/plain; charset=us-ascii
|Content-Id:
|Content-Disposition: inline
|
|"Your SBC Yahoo! Mail Virus Protection detected the virus '"W32.Beagle.M@mm"' in
|the file '"Information.pif"', attached to the enclosed email message. We scanned
|the file using Norton AntiVirus but were unable to clean it. Therefore, we
|removed the content of the attachment from the message. Please contact the
|message sender if you want to receive the attachment. They must clean the file
|and resend it before we can deliver it to you safely.
|
|"
|
|"SBC Yahoo! Mail successfully cleans most infected attachments, which protects
|you from viruses.
|"
|
|--0-1127678671-1102359134-52518
|Content-Type: message/rfc822
|
|{Original message here; viral attachment was stripped. I removed the entire
| message because it isn't interesting.}
--------------------------------------

When it doesn't work, the viral message is delivered unaltered. I know
because my MTA POPs the pacbell.net accounts on pop.pacbell.yahoo.com. My
MTA runs its own virus check, and catches what Yahoo! Mail misses.

The other feature of yahoo.com is "SpamGuard". It is a trainable filter
which routes email either to "Inbox", or "Bulk" folders. If you aren't
downloading the "Bulk" folder contents, you need to check the web interface
from time to time to see if any goodmail landed in the "Bulk" folder. Any
goodmail in the "Bulk" folder should be opened; this reveals a "This is not
spam" button. Click on the button and the message will automatically be
moved to your "Inbox", and the SpamGuard filters updated.

--
Norman
~Win dain a lotica, En vai tu ri, Si lo ta
~Fin dein a loluca, En dragu a sei lain
~Vi fa-ru les shutai am, En riga-lint

Similar ThreadsPosted
HotPOP.com again!!! July 4, 2005, 8:38 pm
Help I have been Infected October 1, 2006, 9:26 pm
spyware infected July 24, 2005, 9:23 pm
Web Server infected? September 16, 2005, 2:58 pm
wininet.dll is infected October 1, 2005, 12:17 am
Can't handle infected PC. Please Help! April 15, 2006, 6:17 am
RE: Can't handle infected PC. Please Help! April 15, 2006, 1:10 pm
"Your computer is infected" July 1, 2006, 10:59 am
!!Infected with cool.exe Help!! August 9, 2006, 10:01 pm
!!Infected with cool.exe Help!! August 9, 2006, 10:03 pm

The site map in XML format XML site map

Contact Us | Privacy Policy