Article View: ucam.comp.mail
Article #3Re: Is this trojan known?
From: Cwatters
Date: Sat, 27 Jun 2009 21:15
Date: Sat, 27 Jun 2009 21:15
24 lines
2458 bytes
2458 bytes
"Douglas de Lacey" <del2@cam.ac.uk> wrote in message news:h22t1v$ib8$1@gemini.csx.cam.ac.uk... > The computer of a friend of mine has started sending out spam messages > advertising ele-stores.com; the messages begin "Hey ,friend > I find a site to sell electronic products with very good price. > Laptop ,iPhone even Motorcycle are very popular ." He says he has > up-to-date McAfee anti virus and firewall installed with regular updates, > and a full scan has revealed nothing. Not being a Windows person myself, I > wonder if anyone has information: a quick google fails to produce anything > obviously useful. > > Thanks, > Douglas de Lacey Sounds like his hotmail/gmail account was hacked.. See ... http://groups.google.com/group/Gmail-Users/browse_thread/thread/7de852b7c47544f6?fwc=1 Have him change his password to something more secure. Elsewhere someone suggests also ensuring you use https... In Gmail, Settings > "Browser connection", set to "Always use https"
Technical Details
Message-ID:
<VeCdnWIT_-JLFtvXnZ2dnUVZ8kqdnZ2d@brightview.co.uk>Path:
arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!bigfeed3.bellsouth.net!news.bellsouth.net!border2.nntp.dca.giganews.com!nntp.giganews.com!backlog2.nntp.dca.giganews.com!nntp.brightview.co.uk!news.brightview.co.uk.POSTED!not-for-mailReferences:
<h22t1v$ib8$1@gemini.csx.cam.ac.uk>Show Full Headers
Complete Article Headers
X-Google-Thread: 4df1f5d2bc,2834867da9256002 X-Google-Attributes: gid4df1f5d2bc,public,usenet X-Google-NewGroupId: yes X-Google-Language: ENGLISH,ASCII-7-bit Path: arc1-ca.pugleaf.net!g2news2.google.com!news1.google.com!npeer01.iad.highwinds-media.com!news.highwinds-media.com!feed-me.highwinds-media.com!bigfeed3.bellsouth.net!news.bellsouth.net!border2.nntp.dca.giganews.com!nntp.giganews.com!backlog2.nntp.dca.giganews.com!nntp.brightview.co.uk!news.brightview.co.uk.POSTED!not-for-mail NNTP-Posting-Date: Sat, 27 Jun 2009 16:15:02 -0500 From: "Cwatters" <colin.wattersNOSPAM@TurnersOakNOSPAM.plus.com> Newsgroups: ucam.comp.mail,cam.misc References: <h22t1v$ib8$1@gemini.csx.cam.ac.uk> Subject: Re: Is this trojan known? Date: Sat, 27 Jun 2009 22:15:05 +0100 X-Priority: 3 X-MSMail-Priority: Normal X-Newsreader: Microsoft Outlook Express 6.00.2900.3138 X-RFC2646: Format=Flowed; Response X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350 Message-ID: <VeCdnWIT_-JLFtvXnZ2dnUVZ8kqdnZ2d@brightview.co.uk> Lines: 28 X-Usenet-Provider: http://www.giganews.com X-Trace: sv3-GVZY62ed0eULSfO/yUe+XilutIjN8V5b3mvgYOB15wI6JmhkZ0fsHsQOAF2FF8fZ4xFyf10bCr7UsfN!3+JaSJkkP+mnBwa45I/NBFrrnXfyTGaQTQU1uCd9p/UeHWXukgs2geVnY0Y8oXbe6FpW641S/+1t!/vPo29iuhsU6Z4a//jkvjo5mqLY= X-Abuse-and-DMCA-Info: Please be sure to forward a copy of ALL headers X-Abuse-and-DMCA-Info: Otherwise we will be unable to process your complaint properly X-Postfilter: 1.3.39