install.exe

TheMSsForum.com: The Microsoft Software Forum

I keep getting an email from quoted Microsoft
entitled "latest security update" or something similar
from the following and they seem to change on a daily
basis. All of the emails have various attachments
(upgrade95.exe, install.exe, etc...) Here are some of the
message sources, and some do seem to be coming from
Microsoft. How can I stop this?:

Return-Path: <vallewis@btopenworld.com>
Received: from einsteinium.btinternet.com ([194.73.73.147]
verified)
by remt30.cluster1.charter.net (CommuniGate Pro SMTP
4.0.6)
with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
Received: from host81-128-187-136.in-addr.btopenworld.com
([81.128.187.136] helo=sjmotu)
by einsteinium.btinternet.com with smtp (Exim 3.22
#23)
id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
+0100
FROM: "Network Security Division" < >
TO: "Partner" < >
SUBJECT: Last Patch
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="ndidbpxhdck"
Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
Date: Sun, 21 Sep 2003 13:40:33 +0100

AND

Return-Path: <vallewis@btopenworld.com>
Received: from einsteinium.btinternet.com ([194.73.73.147]
verified)
by remt30.cluster1.charter.net (CommuniGate Pro SMTP
4.0.6)
with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
Sep 2003 08:56:41 -0400
Received: from host81-128-187-136.in-addr.btopenworld.com
([81.128.187.136] helo=diwso)
by einsteinium.btinternet.com with smtp (Exim 3.22
#23)
id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
+0100
FROM: "Administrator" <emailengine@yahoo.com>
TO: "Internet Recipient" <user@mxdomain.net>
SUBJECT: Error Advice
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="dtveocl"
Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
Date: Sun, 21 Sep 2003 13:41:33 +0100

OR

Return-Path: <nussbicker@infonie.fr>
Received: from mail.libertysurf.net ([213.36.80.91]
verified)
by remt19.cluster1.charter.net (CommuniGate Pro SMTP
4.0.6)
with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
Sep 2003 18:59:57 -0400
Received: from dcxaq (81.166.53.166) by
mail.libertysurf.net (6.5.034)
id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
+0200
Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
postmaster@libertysurf.fr)
Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
(added by postmaster@libertysurf.fr)
FROM: "Network Storage System" <masterroutine@puremail.net>
TO: "email recipient" <receiver@mxdomain.com>
SUBJECT:
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="cterqfmhjvmw"

AND

Return-Path: <aneo@libertysurf.fr>
Received: from mail.libertysurf.net ([213.36.80.91]
verified)
by remt20.cluster1.charter.net (CommuniGate Pro SMTP
4.0.6)
with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
Sep 2003 07:42:38 -0400
Received: from tinm (213.36.170.175) by
mail.libertysurf.net (6.5.034)
id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
+0200
Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
postmaster@libertysurf.fr)
Message-ID:
<3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
postmaster@libertysurf.fr)
FROM: "Microsoft" <vfrxui@news_msn.com>
TO: "MS Corporation User" <user@news_msn.com>
SUBJECT: Last Net Security Update
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="bsvzcxdll"
Top

Re: install.exe by J

J
Mon Sep 22 19:32:17 CDT 2003

i have receive it too.but from the different source address.

is it virus ?


"Jonathan" <jonfox@charter.net> ?????
news:b63a01c38169$90712830$a601280a@phx.gbl...
> I keep getting an email from quoted Microsoft
> entitled "latest security update" or something similar
> from the following and they seem to change on a daily
> basis. All of the emails have various attachments
> (upgrade95.exe, install.exe, etc...) Here are some of the
> message sources, and some do seem to be coming from
> Microsoft. How can I stop this?:
>
> Return-Path: <vallewis@btopenworld.com>
> Received: from einsteinium.btinternet.com ([194.73.73.147]
> verified)
> by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> 4.0.6)
> with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
> Received: from host81-128-187-136.in-addr.btopenworld.com
> ([81.128.187.136] helo=sjmotu)
> by einsteinium.btinternet.com with smtp (Exim 3.22
> #23)
> id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
> +0100
> FROM: "Network Security Division" < >
> TO: "Partner" < >
> SUBJECT: Last Patch
> Mime-Version: 1.0
> Content-Type: multipart/mixed; boundary="ndidbpxhdck"
> Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
> Date: Sun, 21 Sep 2003 13:40:33 +0100
>
> AND
>
> Return-Path: <vallewis@btopenworld.com>
> Received: from einsteinium.btinternet.com ([194.73.73.147]
> verified)
> by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> 4.0.6)
> with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
> Sep 2003 08:56:41 -0400
> Received: from host81-128-187-136.in-addr.btopenworld.com
> ([81.128.187.136] helo=diwso)
> by einsteinium.btinternet.com with smtp (Exim 3.22
> #23)
> id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
> +0100
> FROM: "Administrator" <emailengine@yahoo.com>
> TO: "Internet Recipient" <user@mxdomain.net>
> SUBJECT: Error Advice
> Mime-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="dtveocl"
> Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
> Date: Sun, 21 Sep 2003 13:41:33 +0100
>
> OR
>
> Return-Path: <nussbicker@infonie.fr>
> Received: from mail.libertysurf.net ([213.36.80.91]
> verified)
> by remt19.cluster1.charter.net (CommuniGate Pro SMTP
> 4.0.6)
> with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
> Sep 2003 18:59:57 -0400
> Received: from dcxaq (81.166.53.166) by
> mail.libertysurf.net (6.5.034)
> id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
> +0200
> Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
> postmaster@libertysurf.fr)
> Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
> (added by postmaster@libertysurf.fr)
> FROM: "Network Storage System" <masterroutine@puremail.net>
> TO: "email recipient" <receiver@mxdomain.com>
> SUBJECT:
> Mime-Version: 1.0
> Content-Type: multipart/alternative;
> boundary="cterqfmhjvmw"
>
> AND
>
> Return-Path: <aneo@libertysurf.fr>
> Received: from mail.libertysurf.net ([213.36.80.91]
> verified)
> by remt20.cluster1.charter.net (CommuniGate Pro SMTP
> 4.0.6)
> with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
> Sep 2003 07:42:38 -0400
> Received: from tinm (213.36.170.175) by
> mail.libertysurf.net (6.5.034)
> id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
> +0200
> Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
> postmaster@libertysurf.fr)
> Message-ID:
> <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
> postmaster@libertysurf.fr)
> FROM: "Microsoft" <vfrxui@news_msn.com>
> TO: "MS Corporation User" <user@news_msn.com>
> SUBJECT: Last Net Security Update
> Mime-Version: 1.0
> Content-Type: multipart/mixed; boundary="bsvzcxdll"
>


Top

Re: install.exe by melvin

melvin
Mon Sep 22 20:04:06 CDT 2003

Hello;
You have received a virus/worm. Do not open any of these
files. They will appear in your email from different
addresses. I received mine from 40 different addresses.
They look official, because they appear to come from
Microsoft. They are bogus......nasty wolves in sheep's
clothing. They will tear the hell out of your computer if
you OPEN the attachments. MICROSOFT DOES NOT SEND
SECURITY STUFF VIA EMAIL. Read yesterdays history to find
the best ways to deal with these critters of destruction.
Good luck.

Melvin

>-----Original Message-----
>i have receive it too.but from the different source
address.
>
>is it virus ?
>
>
>"Jonathan" <jonfox@charter.net> ?????
>news:b63a01c38169$90712830$a601280a@phx.gbl...
>> I keep getting an email from quoted Microsoft
>> entitled "latest security update" or something similar
>> from the following and they seem to change on a daily
>> basis. All of the emails have various attachments
>> (upgrade95.exe, install.exe, etc...) Here are some of
the
>> message sources, and some do seem to be coming from
>> Microsoft. How can I stop this?:
>>
>> Return-Path: <vallewis@btopenworld.com>
>> Received: from einsteinium.btinternet.com
([194.73.73.147]
>> verified)
>> by remt30.cluster1.charter.net (CommuniGate Pro SMTP
>> 4.0.6)
>> with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -
0400
>> Received: from host81-128-187-136.in-
addr.btopenworld.com
>> ([81.128.187.136] helo=sjmotu)
>> by einsteinium.btinternet.com with smtp (Exim 3.22
>> #23)
>> id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
>> +0100
>> FROM: "Network Security Division" < >
>> TO: "Partner" < >
>> SUBJECT: Last Patch
>> Mime-Version: 1.0
>> Content-Type: multipart/mixed; boundary="ndidbpxhdck"
>> Message-Id: <E1A13Vx-0002e1-
00@einsteinium.btinternet.com>
>> Date: Sun, 21 Sep 2003 13:40:33 +0100
>>
>> AND
>>
>> Return-Path: <vallewis@btopenworld.com>
>> Received: from einsteinium.btinternet.com
([194.73.73.147]
>> verified)
>> by remt30.cluster1.charter.net (CommuniGate Pro SMTP
>> 4.0.6)
>> with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
>> Sep 2003 08:56:41 -0400
>> Received: from host81-128-187-136.in-
addr.btopenworld.com
>> ([81.128.187.136] helo=diwso)
>> by einsteinium.btinternet.com with smtp (Exim 3.22
>> #23)
>> id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
>> +0100
>> FROM: "Administrator" <emailengine@yahoo.com>
>> TO: "Internet Recipient" <user@mxdomain.net>
>> SUBJECT: Error Advice
>> Mime-Version: 1.0
>> Content-Type: multipart/alternative;
>> boundary="dtveocl"
>> Message-Id: <E1A13Wv-0002ko-
00@einsteinium.btinternet.com>
>> Date: Sun, 21 Sep 2003 13:41:33 +0100
>>
>> OR
>>
>> Return-Path: <nussbicker@infonie.fr>
>> Received: from mail.libertysurf.net ([213.36.80.91]
>> verified)
>> by remt19.cluster1.charter.net (CommuniGate Pro SMTP
>> 4.0.6)
>> with ESMTP id 165515007 for jonfox@charter.net; Sun,
21
>> Sep 2003 18:59:57 -0400
>> Received: from dcxaq (81.166.53.166) by
>> mail.libertysurf.net (6.5.034)
>> id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
>> +0200
>> Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
>> postmaster@libertysurf.fr)
>> Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
>> (added by postmaster@libertysurf.fr)
>> FROM: "Network Storage System"
<masterroutine@puremail.net>
>> TO: "email recipient" <receiver@mxdomain.com>
>> SUBJECT:
>> Mime-Version: 1.0
>> Content-Type: multipart/alternative;
>> boundary="cterqfmhjvmw"
>>
>> AND
>>
>> Return-Path: <aneo@libertysurf.fr>
>> Received: from mail.libertysurf.net ([213.36.80.91]
>> verified)
>> by remt20.cluster1.charter.net (CommuniGate Pro SMTP
>> 4.0.6)
>> with ESMTP id 167964851 for jonfox@charter.net; Mon,
22
>> Sep 2003 07:42:38 -0400
>> Received: from tinm (213.36.170.175) by
>> mail.libertysurf.net (6.5.034)
>> id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
>> +0200
>> Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
>> postmaster@libertysurf.fr)
>> Message-ID:
>> <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added
by
>> postmaster@libertysurf.fr)
>> FROM: "Microsoft" <vfrxui@news_msn.com>
>> TO: "MS Corporation User" <user@news_msn.com>
>> SUBJECT: Last Net Security Update
>> Mime-Version: 1.0
>> Content-Type: multipart/mixed; boundary="bsvzcxdll"
>>
>
>
>.
>
Top

Re: install.exe by helper

helper
Mon Sep 22 20:05:32 CDT 2003

YES.
It's a Virus.
Don't run any attachments you don't expect
or know about.

This emails are not from Microsoft.
http://www.microsoft.com/technet/security/news/patch_hoax.asp
http://www.microsoft.com/technet/security/virus/alerts/swen.asp


"Authentic security bulletin mailers never provide the patch itself or a
link to the patch; instead, they refer the reader to the complete version of
the bulletin on our web site, which provides a link to the patch"




"J.C. chen" <jefferychen@msik.com.cn> wrote in message
news:OvYoXpWgDHA.1932@TK2MSFTNGP11.phx.gbl...
> i have receive it too.but from the different source address.
>
> is it virus ?
>
>
> "Jonathan" <jonfox@charter.net> ?????
> news:b63a01c38169$90712830$a601280a@phx.gbl...
> > I keep getting an email from quoted Microsoft
> > entitled "latest security update" or something similar
> > from the following and they seem to change on a daily
> > basis. All of the emails have various attachments
> > (upgrade95.exe, install.exe, etc...) Here are some of the
> > message sources, and some do seem to be coming from
> > Microsoft. How can I stop this?:
> >
> > Return-Path: <vallewis@btopenworld.com>
> > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > verified)
> > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > 4.0.6)
> > with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
> > Received: from host81-128-187-136.in-addr.btopenworld.com
> > ([81.128.187.136] helo=sjmotu)
> > by einsteinium.btinternet.com with smtp (Exim 3.22
> > #23)
> > id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
> > +0100
> > FROM: "Network Security Division" < >
> > TO: "Partner" < >
> > SUBJECT: Last Patch
> > Mime-Version: 1.0
> > Content-Type: multipart/mixed; boundary="ndidbpxhdck"
> > Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
> > Date: Sun, 21 Sep 2003 13:40:33 +0100
> >
> > AND
> >
> > Return-Path: <vallewis@btopenworld.com>
> > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > verified)
> > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > 4.0.6)
> > with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
> > Sep 2003 08:56:41 -0400
> > Received: from host81-128-187-136.in-addr.btopenworld.com
> > ([81.128.187.136] helo=diwso)
> > by einsteinium.btinternet.com with smtp (Exim 3.22
> > #23)
> > id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
> > +0100
> > FROM: "Administrator" <emailengine@yahoo.com>
> > TO: "Internet Recipient" <user@mxdomain.net>
> > SUBJECT: Error Advice
> > Mime-Version: 1.0
> > Content-Type: multipart/alternative;
> > boundary="dtveocl"
> > Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
> > Date: Sun, 21 Sep 2003 13:41:33 +0100
> >
> > OR
> >
> > Return-Path: <nussbicker@infonie.fr>
> > Received: from mail.libertysurf.net ([213.36.80.91]
> > verified)
> > by remt19.cluster1.charter.net (CommuniGate Pro SMTP
> > 4.0.6)
> > with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
> > Sep 2003 18:59:57 -0400
> > Received: from dcxaq (81.166.53.166) by
> > mail.libertysurf.net (6.5.034)
> > id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
> > +0200
> > Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
> > postmaster@libertysurf.fr)
> > Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
> > (added by postmaster@libertysurf.fr)
> > FROM: "Network Storage System" <masterroutine@puremail.net>
> > TO: "email recipient" <receiver@mxdomain.com>
> > SUBJECT:
> > Mime-Version: 1.0
> > Content-Type: multipart/alternative;
> > boundary="cterqfmhjvmw"
> >
> > AND
> >
> > Return-Path: <aneo@libertysurf.fr>
> > Received: from mail.libertysurf.net ([213.36.80.91]
> > verified)
> > by remt20.cluster1.charter.net (CommuniGate Pro SMTP
> > 4.0.6)
> > with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
> > Sep 2003 07:42:38 -0400
> > Received: from tinm (213.36.170.175) by
> > mail.libertysurf.net (6.5.034)
> > id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
> > +0200
> > Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
> > postmaster@libertysurf.fr)
> > Message-ID:
> > <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
> > postmaster@libertysurf.fr)
> > FROM: "Microsoft" <vfrxui@news_msn.com>
> > TO: "MS Corporation User" <user@news_msn.com>
> > SUBJECT: Last Net Security Update
> > Mime-Version: 1.0
> > Content-Type: multipart/mixed; boundary="bsvzcxdll"
> >
>
>


Top

Re: install.exe by J

J
Mon Sep 22 20:15:57 CDT 2003

thanks, i have not open the attached file .


"helper" <there> ¼¶¼g©ó¶l¥ó news:OsjEQ7WgDHA.1700@TK2MSFTNGP10.phx.gbl...
> YES.
> It's a Virus.
> Don't run any attachments you don't expect
> or know about.
>
> This emails are not from Microsoft.
> http://www.microsoft.com/technet/security/news/patch_hoax.asp
> http://www.microsoft.com/technet/security/virus/alerts/swen.asp
>
>
> "Authentic security bulletin mailers never provide the patch itself or a
> link to the patch; instead, they refer the reader to the complete version
of
> the bulletin on our web site, which provides a link to the patch"
>
>
>
>
> "J.C. chen" <jefferychen@msik.com.cn> wrote in message
> news:OvYoXpWgDHA.1932@TK2MSFTNGP11.phx.gbl...
> > i have receive it too.but from the different source address.
> >
> > is it virus ?
> >
> >
> > "Jonathan" <jonfox@charter.net> ?????
> > news:b63a01c38169$90712830$a601280a@phx.gbl...
> > > I keep getting an email from quoted Microsoft
> > > entitled "latest security update" or something similar
> > > from the following and they seem to change on a daily
> > > basis. All of the emails have various attachments
> > > (upgrade95.exe, install.exe, etc...) Here are some of the
> > > message sources, and some do seem to be coming from
> > > Microsoft. How can I stop this?:
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=sjmotu)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
> > > +0100
> > > FROM: "Network Security Division" < >
> > > TO: "Partner" < >
> > > SUBJECT: Last Patch
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="ndidbpxhdck"
> > > Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:40:33 +0100
> > >
> > > AND
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
> > > Sep 2003 08:56:41 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=diwso)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
> > > +0100
> > > FROM: "Administrator" <emailengine@yahoo.com>
> > > TO: "Internet Recipient" <user@mxdomain.net>
> > > SUBJECT: Error Advice
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="dtveocl"
> > > Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:41:33 +0100
> > >
> > > OR
> > >
> > > Return-Path: <nussbicker@infonie.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt19.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
> > > Sep 2003 18:59:57 -0400
> > > Received: from dcxaq (81.166.53.166) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
> > > +0200
> > > Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
> > > (added by postmaster@libertysurf.fr)
> > > FROM: "Network Storage System" <masterroutine@puremail.net>
> > > TO: "email recipient" <receiver@mxdomain.com>
> > > SUBJECT:
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="cterqfmhjvmw"
> > >
> > > AND
> > >
> > > Return-Path: <aneo@libertysurf.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt20.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
> > > Sep 2003 07:42:38 -0400
> > > Received: from tinm (213.36.170.175) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
> > > +0200
> > > Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID:
> > > <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
> > > postmaster@libertysurf.fr)
> > > FROM: "Microsoft" <vfrxui@news_msn.com>
> > > TO: "MS Corporation User" <user@news_msn.com>
> > > SUBJECT: Last Net Security Update
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="bsvzcxdll"
> > >
> >
> >
>
>


Top

Re: install.exe by J

J
Mon Sep 22 20:16:28 CDT 2003

thanks, i have not open the attached file .
but how can i clean the mail in my mail server.


"helper" <there> ¼¶¼g©ó¶l¥ó news:OsjEQ7WgDHA.1700@TK2MSFTNGP10.phx.gbl...
> YES.
> It's a Virus.
> Don't run any attachments you don't expect
> or know about.
>
> This emails are not from Microsoft.
> http://www.microsoft.com/technet/security/news/patch_hoax.asp
> http://www.microsoft.com/technet/security/virus/alerts/swen.asp
>
>
> "Authentic security bulletin mailers never provide the patch itself or a
> link to the patch; instead, they refer the reader to the complete version
of
> the bulletin on our web site, which provides a link to the patch"
>
>
>
>
> "J.C. chen" <jefferychen@msik.com.cn> wrote in message
> news:OvYoXpWgDHA.1932@TK2MSFTNGP11.phx.gbl...
> > i have receive it too.but from the different source address.
> >
> > is it virus ?
> >
> >
> > "Jonathan" <jonfox@charter.net> ?????
> > news:b63a01c38169$90712830$a601280a@phx.gbl...
> > > I keep getting an email from quoted Microsoft
> > > entitled "latest security update" or something similar
> > > from the following and they seem to change on a daily
> > > basis. All of the emails have various attachments
> > > (upgrade95.exe, install.exe, etc...) Here are some of the
> > > message sources, and some do seem to be coming from
> > > Microsoft. How can I stop this?:
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=sjmotu)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
> > > +0100
> > > FROM: "Network Security Division" < >
> > > TO: "Partner" < >
> > > SUBJECT: Last Patch
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="ndidbpxhdck"
> > > Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:40:33 +0100
> > >
> > > AND
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
> > > Sep 2003 08:56:41 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=diwso)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
> > > +0100
> > > FROM: "Administrator" <emailengine@yahoo.com>
> > > TO: "Internet Recipient" <user@mxdomain.net>
> > > SUBJECT: Error Advice
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="dtveocl"
> > > Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:41:33 +0100
> > >
> > > OR
> > >
> > > Return-Path: <nussbicker@infonie.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt19.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
> > > Sep 2003 18:59:57 -0400
> > > Received: from dcxaq (81.166.53.166) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
> > > +0200
> > > Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
> > > (added by postmaster@libertysurf.fr)
> > > FROM: "Network Storage System" <masterroutine@puremail.net>
> > > TO: "email recipient" <receiver@mxdomain.com>
> > > SUBJECT:
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="cterqfmhjvmw"
> > >
> > > AND
> > >
> > > Return-Path: <aneo@libertysurf.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt20.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
> > > Sep 2003 07:42:38 -0400
> > > Received: from tinm (213.36.170.175) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
> > > +0200
> > > Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID:
> > > <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
> > > postmaster@libertysurf.fr)
> > > FROM: "Microsoft" <vfrxui@news_msn.com>
> > > TO: "MS Corporation User" <user@news_msn.com>
> > > SUBJECT: Last Net Security Update
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="bsvzcxdll"
> > >
> >
> >
>
>




Top

Re: install.exe by J

J
Mon Sep 22 20:16:32 CDT 2003

thanks, i have not open the attached file .
but how can i clean the mail in my mail server.


"helper" <there> ¼¶¼g©ó¶l¥ó news:OsjEQ7WgDHA.1700@TK2MSFTNGP10.phx.gbl...
> YES.
> It's a Virus.
> Don't run any attachments you don't expect
> or know about.
>
> This emails are not from Microsoft.
> http://www.microsoft.com/technet/security/news/patch_hoax.asp
> http://www.microsoft.com/technet/security/virus/alerts/swen.asp
>
>
> "Authentic security bulletin mailers never provide the patch itself or a
> link to the patch; instead, they refer the reader to the complete version
of
> the bulletin on our web site, which provides a link to the patch"
>
>
>
>
> "J.C. chen" <jefferychen@msik.com.cn> wrote in message
> news:OvYoXpWgDHA.1932@TK2MSFTNGP11.phx.gbl...
> > i have receive it too.but from the different source address.
> >
> > is it virus ?
> >
> >
> > "Jonathan" <jonfox@charter.net> ?????
> > news:b63a01c38169$90712830$a601280a@phx.gbl...
> > > I keep getting an email from quoted Microsoft
> > > entitled "latest security update" or something similar
> > > from the following and they seem to change on a daily
> > > basis. All of the emails have various attachments
> > > (upgrade95.exe, install.exe, etc...) Here are some of the
> > > message sources, and some do seem to be coming from
> > > Microsoft. How can I stop this?:
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35155949; Sun, 21 Sep 2003 08:41:26 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=sjmotu)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Vx-0002e1-00; Sun, 21 Sep 2003 13:40:33
> > > +0100
> > > FROM: "Network Security Division" < >
> > > TO: "Partner" < >
> > > SUBJECT: Last Patch
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="ndidbpxhdck"
> > > Message-Id: <E1A13Vx-0002e1-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:40:33 +0100
> > >
> > > AND
> > >
> > > Return-Path: <vallewis@btopenworld.com>
> > > Received: from einsteinium.btinternet.com ([194.73.73.147]
> > > verified)
> > > by remt30.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 35166762 for jonfox@charter.net; Sun, 21
> > > Sep 2003 08:56:41 -0400
> > > Received: from host81-128-187-136.in-addr.btopenworld.com
> > > ([81.128.187.136] helo=diwso)
> > > by einsteinium.btinternet.com with smtp (Exim 3.22
> > > #23)
> > > id 1A13Wv-0002ko-00; Sun, 21 Sep 2003 13:41:33
> > > +0100
> > > FROM: "Administrator" <emailengine@yahoo.com>
> > > TO: "Internet Recipient" <user@mxdomain.net>
> > > SUBJECT: Error Advice
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="dtveocl"
> > > Message-Id: <E1A13Wv-0002ko-00@einsteinium.btinternet.com>
> > > Date: Sun, 21 Sep 2003 13:41:33 +0100
> > >
> > > OR
> > >
> > > Return-Path: <nussbicker@infonie.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt19.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 165515007 for jonfox@charter.net; Sun, 21
> > > Sep 2003 18:59:57 -0400
> > > Received: from dcxaq (81.166.53.166) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F55821100A77460; Mon, 22 Sep 2003 00:55:11
> > > +0200
> > > Date: Mon, 22 Sep 2003 00:55:11 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID: <3F55821100A77460@mail04.pds.libertysurf.fr>
> > > (added by postmaster@libertysurf.fr)
> > > FROM: "Network Storage System" <masterroutine@puremail.net>
> > > TO: "email recipient" <receiver@mxdomain.com>
> > > SUBJECT:
> > > Mime-Version: 1.0
> > > Content-Type: multipart/alternative;
> > > boundary="cterqfmhjvmw"
> > >
> > > AND
> > >
> > > Return-Path: <aneo@libertysurf.fr>
> > > Received: from mail.libertysurf.net ([213.36.80.91]
> > > verified)
> > > by remt20.cluster1.charter.net (CommuniGate Pro SMTP
> > > 4.0.6)
> > > with ESMTP id 167964851 for jonfox@charter.net; Mon, 22
> > > Sep 2003 07:42:38 -0400
> > > Received: from tinm (213.36.170.175) by
> > > mail.libertysurf.net (6.5.034)
> > > id 3F5300E500D9AB67; Mon, 22 Sep 2003 13:32:16
> > > +0200
> > > Date: Mon, 22 Sep 2003 13:32:16 +0200 (added by
> > > postmaster@libertysurf.fr)
> > > Message-ID:
> > > <3F5300E500D9AB67@webmail03.pds.libertysurf.fr> (added by
> > > postmaster@libertysurf.fr)
> > > FROM: "Microsoft" <vfrxui@news_msn.com>
> > > TO: "MS Corporation User" <user@news_msn.com>
> > > SUBJECT: Last Net Security Update
> > > Mime-Version: 1.0
> > > Content-Type: multipart/mixed; boundary="bsvzcxdll"
> > >
> >
> >
>
>




Top