| Topic: |
Religions > Atheism |
| User: |
"Greywolf" |
| Date: |
14 Jul 2007 01:06:01 PM |
| Object: |
OT: Anyone 'In the Know' About the Following? |
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email. Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
.
|
|
| User: "Tough Tonto" |
|
| Title: Re: Anyone 'In the Know' About the Following? |
14 Jul 2007 01:50:06 PM |
|
|
"Greywolf" <> wrote in message
news:139i454dp9emp62@news.supernews.com...
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email. Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
I wouldnt trust it. Security programs run on your machine; they
dont send emails.
.
|
|
|
| User: "Greywolf" |
|
| Title: Re: Anyone 'In the Know' About the Following? |
14 Jul 2007 02:23:19 PM |
|
|
"Tough Tonto" <Chemo@subby.com> wrote in message
news:yV8mi.2839$yx4.679@trndny08...
"Greywolf" < > wrote in message
news:139i454dp9emp62@news.supernews.com...
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email. Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
I wouldnt trust it. Security programs run on your machine; they
dont send emails.
I suppose you're right. Dang things are getting more 'realistic' -- along
with PayPal and Amazon.com 'notices' -- all the time.
Thanks for the info.
Greywolf
.
|
|
|
|
|
| User: "Enkidu" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 03:12:11 PM |
|
|
"Greywolf" <> wrote in news:139i454dp9emp62
@news.supernews.com:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email.
Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
I've been getting lots of "eCards" sent to the usenet address I use for
alt.atheism. Spam? Virus sites? Who knows, but don't click on random
links.
--
Enkidu AA#2165
EAC Chaplain and ordained minister,
ULC, Modesto, CA
We are to admit no more causes of natural things than such as are both
true and sufficient to explain their appearances.
-Sir Isaac Newton
.
|
|
|
| User: "Greywolf" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 03:52:22 PM |
|
|
"Enkidu" <fox_rgfszx@trashmail.net> wrote in message
news:Xns996D86F946B3D255229@130.133.1.4...
"Greywolf" < > wrote in news:139i454dp9emp62
@news.supernews.com:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email.
Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
I've been getting lots of "eCards" sent to the usenet address I use for
alt.atheism. Spam? Virus sites? Who knows, but don't click on random
links.
--
Enkidu AA#2165
EAC Chaplain and ordained minister,
ULC, Modesto, CA
I definitely shan't.
Greywolf
We are to admit no more causes of natural things than such as are both
true and sufficient to explain their appearances.
-Sir Isaac Newton
.
|
|
|
| User: "MarkA" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 09:56:43 PM |
|
|
On Sat, 14 Jul 2007 15:52:22 -0500, Greywolf wrote:
"Enkidu" <fox_rgfszx@trashmail.net> wrote in message
news:Xns996D86F946B3D255229@130.133.1.4...
"Greywolf" < > wrote in news:139i454dp9emp62
@news.supernews.com:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email.
Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright © 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
I've been getting lots of "eCards" sent to the usenet address I use for
alt.atheism. Spam? Virus sites? Who knows, but don't click on random
links.
--
Enkidu AA#2165
EAC Chaplain and ordained minister,
ULC, Modesto, CA
I definitely shan't.
Greywolf
We are to admit no more causes of natural things than such as are both
true and sufficient to explain their appearances.
-Sir Isaac Newton
The "You have received an e-card from a family member..." e-mail is an
attempt to exploit security holes in Java script. If you click on the
link, it will try several known vulnerabilities to recruit your computer
to be a spam relay.
--
MarkA
(This space accidentally filled in)
.
|
|
|
|
|
|
| User: "Meteorite Debris" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 11:23:52 PM |
|
|
Last time that great scribe Greywolf <> chipped away=20
at his/her stone these gems of wisdom for posterity ...
I have received a number of e-mails similar, though not exact, as the=20
following:
=20
McAfee SpamKiller discovered a problem with the following email. Contact=
=20
your system administrator, quoting the ticket number for further=20
information.
=20
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia
From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,=20
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,=20
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,=20
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English)
Ticket Number: 0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
=20
Copyright =A9 1993-2003, Networks Associates Technology, Inc.
All Rights Reserved.
http://www.mcafeesecurity.com
=20
=20
=20
Is this the 'real deal' or just McAfee trying to drum up some business?
I've had emails like like that. Don't follow the links. I also get "e-
cards" with urls that consist only of IP numbers - not domain names.
--=20
Remove both YOUR_SHOES before replying
apatriot #1, atheist #1417,=20
Chief EAC prophet=20
Jason Gastrich is praying for me on 8 January 2009
Apatriotism Yahoo Group
http://groups.yahoo.com/group/apatriotism
"Those who can make you believe absurdities can make=20
you commit atrocities." - Voltaire
.
|
|
|
|
| User: "Therion Ware" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 02:25:28 PM |
|
|
On Sat, 14 Jul 2007 13:06:01 -0500, "Greywolf" <greywolf@cybrzn.com>
wrote:
I have received a number of e-mails similar, though not exact, as the
following:
[Snip]
The message header would be useful, and will probably tell all.
.
|
|
|
| User: "Greywolf" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 03:50:09 PM |
|
|
"Therion Ware" <autodelete@city-of-dis.com> wrote in message
news:hs8i93hrel2bf0q3io893cefdrfm81hd58@4ax.com...
On Sat, 14 Jul 2007 13:06:01 -0500, "Greywolf" < >
wrote:
I have received a number of e-mails similar, though not exact, as the
following:
[Snip]
The message header would be useful, and will probably tell all.
Here it is (looks phony as hell now that I've actually paid real attention
to it):
From: To:
Subject: McAfee SpamKiller Alert.
But it *does* look real 'official-like' too. But it's in http, no less. The
others aren't.
What do you think?
Greywolf
.
|
|
|
| User: "Mark K. Bilbo" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 06:49:36 PM |
|
|
On Sat, 14 Jul 2007 15:50:09 -0500, Greywolf wrote:
"Therion Ware" <autodelete@city-of-dis.com> wrote in message
news:hs8i93hrel2bf0q3io893cefdrfm81hd58@4ax.com...
On Sat, 14 Jul 2007 13:06:01 -0500, "Greywolf" < >
wrote:
I have received a number of e-mails similar, though not exact, as the
following:
[Snip]
The message header would be useful, and will probably tell all.
Here it is (looks phony as hell now that I've actually paid real
attention to it):
From: To: Subject:
McAfee SpamKiller Alert.
But it *does* look real 'official-like' too. But it's in http, no less.
The others aren't.
What do you think?
Still a very good chance it's a poorly configured mail server. As in, the
administrator email has never been filled in.
--
Mark K. Bilbo a.a. #1423
EAC Department of Linguistic Subversion
------------------------------------------------------------
"The whole aim of practical politics is to keep the populace
alarmed (and hence clamorous to be led to safety) by menacing
it with an endless series of hobgoblins, all of them imaginary."
- H. L. Mencken
.
|
|
|
|
|
|
| User: "Mark K. Bilbo" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 02:36:36 PM |
|
|
On Sat, 14 Jul 2007 13:06:01 -0500, Greywolf wrote:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email. Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English) Ticket Number:
0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright 1993-2003, Networks Associates Technology, Inc. All Rights
Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
Some spammer probably spoofed the From line to make it look as if you
sent the email. Happens all the time out there.
Filtering systems should not be set to send anything out when they kill a
message. You can actually joe job somebody by sending fake emails to such
a system, clogging their email with the messages such as you received.
But not every system admin is paying attention...
--
Mark K. Bilbo a.a. #1423
EAC Department of Linguistic Subversion
------------------------------------------------------------
"What the hell is an aluminum Falcon?"
.
|
|
|
| User: "Greywolf" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 03:58:31 PM |
|
|
"Mark K. Bilbo" <gmail@com.mkbilbo> wrote in message
news:j4SdnZJA5Z5ZuATbnZ2dnUVZ_o7inZ2d@giganews.com...
On Sat, 14 Jul 2007 13:06:01 -0500, Greywolf wrote:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email. Contact
your system administrator, quoting the ticket number for further
information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia From:
To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English) Ticket Number:
0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright 1993-2003, Networks Associates Technology, Inc. All Rights
Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some business?
Some spammer probably spoofed the From line to make it look as if you
sent the email. Happens all the time out there.
Filtering systems should not be set to send anything out when they kill a
message. You can actually joe job somebody by sending fake emails to such
a system, clogging their email with the messages such as you received.
But not every system admin is paying attention...
--
Mark K. Bilbo a.a. #1423
EAC Department of Linguistic Subversion
------------------------------------------------------------
"What the hell is an aluminum Falcon?"
I provided the actual header in my response to Therion Ware.
'administrator@example. org' and some of the detected content seems to
suggest someone trying to sneak in Viagra/pharmaceutical ads as Spam.
'Practice makes perfect', so they say. And oh so 'clever'.
Greywolf
.
|
|
|
| User: "Mark K. Bilbo" |
|
| Title: Re: OT: Anyone 'In the Know' About the Following? |
14 Jul 2007 06:50:33 PM |
|
|
On Sat, 14 Jul 2007 15:58:31 -0500, Greywolf wrote:
"Mark K. Bilbo" <gmail@com.mkbilbo> wrote in message
news:j4SdnZJA5Z5ZuATbnZ2dnUVZ_o7inZ2d@giganews.com...
On Sat, 14 Jul 2007 13:06:01 -0500, Greywolf wrote:
I have received a number of e-mails similar, though not exact, as the
following:
McAfee SpamKiller discovered a problem with the following email.
Contact your system administrator, quoting the ticket number for
further information.
Date/Time sent: 13 Jul 2007 18:27:59
Subject line: Canadian Pharmacy Doctor Natalia From:
greywolf@cybrzn.com To:
Action taken: Deleted
Reason: Banned Content
Rule Group: NAI_BAD_URI, FOUR_SAME_EMAIL, FROM_DRUG_USER,
HAHA_AND_MATCH_COM_HIDDEN, INVALID_X_ORIG_IP, FROM_DRUG_NAME,
SUBJ_ONLINE_PHARMA, HAHA_COMMENT, FROM_DRUG_USER_W_FROM_DRUG_NAME,
MATCH_COM_RAWBODY_NOT_BODY, Profanity (English) Ticket Number:
0bd8-4698-188f-0001
Spam Score: 27
Spam Routing:
Copyright 1993-2003, Networks Associates Technology, Inc. All Rights
Reserved.
http://www.mcafeesecurity.com
Is this the 'real deal' or just McAfee trying to drum up some
business?
Some spammer probably spoofed the From line to make it look as if you
sent the email. Happens all the time out there.
Filtering systems should not be set to send anything out when they kill
a message. You can actually joe job somebody by sending fake emails to
such a system, clogging their email with the messages such as you
received. But not every system admin is paying attention...
I provided the actual header in my response to Therion Ware.
'administrator@example. org' and some of the detected content seems to
suggest someone trying to sneak in Viagra/pharmaceutical ads as Spam.
'Practice makes perfect', so they say. And oh so 'clever'.
If everybody would impliment SPF, this wouldn't be such a problem...
--
Mark K. Bilbo a.a. #1423
EAC Department of Linguistic Subversion
------------------------------------------------------------
"Behold the foul stench of Skeletor's breakfast burrito!"
.
|
|
|
|
|
|
|
Related Articles |
|
|
