Article View: chi.internet
Article #641warning notice from ATT internet security center
From: Matt Ferrari
Date: Thu, 19 May 2011 16:33
Date: Thu, 19 May 2011 16:33
92 lines
4978 bytes
4978 bytes
I guess ATT has a security center that checks up on what your computer is doing..who knew? I wonder if this notice has anything to do with the nasty I picked up that disabled my computer claiming that it was infected and needed to run a certain repair software... or just the fact that I sign onto irc.. either way I got rid of the unpleasant system scan crap by doing a system restore. IMPORTANT COMPUTER SAFETY NOTICE from AT&T Internet Services Security Center -"IRC Traffic Detected" We have evidence which indicates that a computer accessing the Internet via your Internet connection may be infected with malicious software such as a virus or worm. Our investigation shows that the following IP was assigned to your log-on session at the indicated time and was using IRC connections to a computer network which is possibly a Botnet. Date: (UTC) => Your IP: 2011-05-17 17:04:10 => IRC Botnet infected systems commonly send or receive commands that can SPAM email, spread malicious software, and perpetrate identity theft. IRC traffic on ports other than those normally used by IRC can be an indication of backdoor trojans or bots. We realize that in some cases this may be normal activity if you are running an IRC server, but in order to protect yourself and others, we recommend that you scan every system that utilizes your internet connection with up to date Anti-virus software. To address this problem, and in accordance with the terms of service and acceptable use policy of your service agreement, we ask that you immediately take the following steps to secure your network: 1. If your computer(s) are managed by an Information Technology (IT) group at your place of work, then contact them immediately. 2. AT&T offers a free online scan tool PC Health Check that will scan for virus/spyware activity. https://pccheck.att.com/index.aspx?RID=AG 3. If your computer(s) are personally owned, then update the security software on your system (follow the instructions on your vendor's website). You might also consider installing new security software such as AT&T Security Suite. http://www.att.net/iss (You must be logged in with the Master Account ID to download AT&T Security Suite). 4. If you are an advanced user, then consider reimaging your computer(s) and installing the necessary software patches. For less advanced users, this can be done by a third party such as AT&T Connect Tech. https://remotesupport.att.com/index.aspx AT&T Computer consultants trained to clean infected machines might also be located in your area (you can search at yp.com). 5. In all cases, please respond by forwarding this email to: abuse@att.net with an acknowledgment of: "I am taking steps to address this infection." When we receive such an acknowledgment, we can maintain the high quality of service you expect from us. We welcome feedback on what removal tools or method were used. Below are some additional sites you can visit for tools or information: Microsoft Systems Anti-virus: http://www.microsoft.com/security_essentials/ Microsoft Safety Scanner: http://www.microsoft.com/security/scanner/en-us/default.aspx Apple Systems Anti-virus: http://www.apple.com/downloads/macosx/networking_security/avastantivirusmacedition.html We also recommend you run anti-spyware application, like Malwarebytes Anti-Malware or Spybot: http://malwarebytes.org/mbam.php http://www.safer-networking.org/en/index.html Regards, AT&T Internet Services Security Center abuse@att.net SAFETY NOTE: We have included links in this email as a convenience. Please note that it is always safer to copy and paste URLs included in email directly into your browser to reach the referenced site. 85aqb58dd0b15179d86b6b1b5ed5962x
Technical Details
Message-ID:
<ir3go0$t2g$1@dont-email.me>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!feeder.news-service.com!85.214.198.2.MISMATCH!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Thread: 10d5fa,5bb9b2b532916166,start X-Google-NewGroupId: yes X-Google-Attributes: gid837b0c45a0,domainid0,public,usenet X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news4.google.com!feeder.news-service.com!85.214.198.2.MISMATCH!eternal-september.org!feeder.eternal-september.org!.POSTED!not-for-mail From: "Matt Ferrari" <invalid@noSpamORharvest.com> Newsgroups: chi.internet Subject: warning notice from ATT internet security center Date: Thu, 19 May 2011 11:33:03 -0500 Organization: A noiseless patient Spider Lines: 94 Message-ID: <ir3go0$t2g$1@dont-email.me> Injection-Date: Thu, 19 May 2011 16:33:04 +0000 (UTC) Injection-Info: mx04.eternal-september.org; posting-host="4z4nuRRWjxORnpyUUNTu4Q"; logging-data="29776"; mail-complaints-to="abuse@eternal-september.org"; posting-account="U2FsdGVkX19fqwcFcxIBFoHziVInOjcA7TKtrX3ScQI=" X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6090 X-RFC2646: Format=Flowed; Original X-Newsreader: Microsoft Outlook Express 6.00.2900.5931 Cancel-Lock: sha1:Ydu/xGAYW5rWvuGvxgIbRORNJFA= X-Priority: 3 X-MSMail-Priority: Normal