On Tue, 11 Feb 2003, Bernie Cosell wrote:
> I've been getting a bunch of bounce messages from hotmail this morning.
[...]
> Is there some way to figure out what this is about? Has hotmail
> decided that my mailing list is spam?
Hotmail Support <support_x@hotmail.com> replied to my inquiry with a
message implying that I had complained to them about virus-laden e-mail,
specifically something called "W32/Yaha". There was no such virus on my
list, of course, but it appears to be a form letter (no surprise).
It is likely that handling this virus has temporarily overloaded the mail
servers' ability to accept mail.
--
Michael S. Johnson Owner: Nausicaa.net and Miyazaki Mailing List
michj@nausicaa.net http://www.nausicaa.net/miyazaki/mailing-list
On Tue, 11 Feb 2003 support_x@css.one.microsoft.com wrote:
>
> Date: Tue, 11 Feb 2003 05:36:09 -0800
> From: support_x@css.one.microsoft.com
> To: michj@nausicaa.net
> Subject: CST105131634ID - RE:NAUSICAA: error report from MAIL.HOTMAIL.COM (fwd)
>
> [ The following text is in the "iso-8859-1" character set. ]
> [ Your display is set for the "US-ASCII" character set. ]
> [ Some characters may be displayed incorrectly. ]
>
> Dear Michael:
>
>
> Thank you for writing to Hotmail Support.
>
>
> Michael, I am sorry to hear that you are receiving virus e-mail. I
> apologize for any inconvenience this may have caused and look forward
> to providing you with assistance today.
>
> I apologize for the delay in responding to your e-mail. Every message
> that Hotmail receives is very important. Unfortunately, we recently
> received an extremely high volume of e-mail messages and are working
> diligently to catch up.
>
> I understand your concern towards the virus mail you received in your
> account. I realize that such issues can be frustrating and look
> forward to providing you with assistance today.
>
> I would like to let you know that the mail you have received is most
> likely related to viruses that is currently spreading on the Internet,
> called W32/Yaha viruses. Such type of viruses mostly affect the
> address book of affected account. These e-mail viruses perpetuate
> themselves by causing e-mail with the virus attached to be sent to all
> the entries in your contacts list without your knowledge. This does
> not necessarily mean that your computer is infected, but that a
> computer is infected that contains your MSN E-mail address in its
> address book or contact list.
>
> W32/Yaha Virus is a mass-mailing email worm that attempts to to email
> itself to all the contacts in the Windows Address Book, MSN Messenger,
> .NET Messenger and all the files whose extensions contain the letters
> HT. The worm sends an email message to these addresses with itself as
> an attachment using its own SMTP engine. The worm also attempts to end
> the antivirus and firewall processes.
>
> The "From" address is randomly chosen from email addresses that the
> worm finds on the infected computer. It uses random subject lines,
> message bodies, and attachment file names. The worm tries to copy
> itself to Windows system folder. The reason for receiving the virus
> mail in your account is that the virus has picked up your email
> address on an infected computer and is automatically sending them
> without the knowledge of the person whose computer is infected with
> this virus.
>
> The virus email message has the following characteristics:
>
> The subject line is one of the following:
>
> Looking for Friendship
> Feel the fragrance of Love
> True Love
> make ur friend happy
> Who is ur Best Friend
> hey check it yaar
> Check this shit
> Hello
> Hi
> I am in Love
> I Love You
> You are so sweet
> U realy Want this
> to ur lovers
> to ur friends
> Find a good friend
> Learn How To Love
> Are you looking for Love
> Wowwwwwwwwwww check it
> Check ur friends Circle
> The world of Friendship
> Shake it baby
> How sweet this Screen saver
> war Againest Loneliness
> Need a friend?
> Say 'I Like You' To ur friend
> love speaks from the heart
> Let's Dance and forget pains
> Hardcore Screensavers 4 U
> XXX Screensavers 4 U
> We want peace
> Wanna be a HE-MAN
> Visit us
> One Virus Writer's Story
> One Hacker's Love
> The Hotmail Hack
>
> The body of the mail may contain one of the following:
>
> hey,
> did u always dreamnt of hacking ur friends hotmail account..
> finally i got a hotmail hack from the internet that really works..
> ur my best friend thats why sending to u..
> check it..just run it..enter victim's address and u will get the pass.
>
> hi,
> check the attached love screensaver
> and feel the fragrance of true love..
>
> Hi,
> check the attached screensaver..
> its really wonderfool..
> i got it from freescreensavers.com
>
> Hi,
> check the attached screensaver
> and enjoy the world of friendship..
>
> The name of the attachment file can be one of the following:
>
> Love.scr
> Hotmail_hack_exe.scr
> Friend_finder_exe
> Be_happy.scr
> Sweet.scr
> Shake.scr
> World_of_friendship.scr
> Friendship.scr
> Funny.scr
> Free_Love_Screensavers.scr
> The_Best.scr
> Codeproject.scr
> SQL_4_Free.scr
> I_Love_You.scr
> Hardcore4Free.scr
> xxx4Free.scr
> Screensavers.scr
>
> Unfortunately, we cannot determine the true source of such mails as
> these has the ability to spoof e-mail addresses. This means that when
> it attempts to send copies of itself out via e-mail (via the infected
> computer's default SMTP server), it chooses a random e-mail address
> from an address book and uses it to send copies of itself to the other
> entries in the address book instead of the e-mail address of the
> infected user. This makes the virus very difficult to track.
>
> Note: Hotmail detects most viruses, but new ones are created all the
> time. We update our software with McAfee regularly, but as new viruses
> come into being, some viruses may pass through undetected. The best
> way to protect yourself is not to open an attachment from someone you
> don't know or from a suspicious address.
>
> If your computer has anti-virus protection software installed, we
> recommend that you contact the support group of your anti-virus
> software to get the latest signature file, which can help protect your
> computer. In addition, we also suggest you download the latest
> Microsoft updates.
>
> To download the latest updates for your Microsoft software, please
> visit the following sites: http://www.windowsupdate.com and
> http://office.microsoft.com/productupdates/.
>
> I hope that the support information I have provided with the reason
> for receiving virus mail is helpful. If you have any additional
> questions or need further assistance, please reply to this message.
> Thank you for your patience.
>
> Michael, please remember that MSN Hotmail also has comprehensive
> online help--just click Help in the upper right corner.
>
>
> Sincerely,
>
>
> Jose
> MSN Hotmail Customer Support Representative
>
> --- Original Message ---
> From: michj@nausicaa.net
> To: support_x@css.one.microsoft.com
> Sent: Mon Feb 10 16:59:51 UTC+0900 2003
> Subject: NAUSICAA: error report from MAIL.HOTMAIL.COM (fwd)
>
>
> To Whom It May Concern:
>
> What is the nature of this outage? Is this the same bug that rejected
> mail on August 24th, 2002 for several days?
>
> --
> Thanks,
> Michael
[...]
Follow-Ups:
References:
|
|
