I was at work and checked my e-mail on my laptop there was a new mail
message to me from my home computers hard drive (the home computer was on,
no one was home) the subject line read short joke and the text of the
message read check it out and it had half of my password, next there was a
hyperlink to a site.
I dont know where to start protecting

Re: possible system intruder XP by Elendil

Elendil
Mon May 22 19:17:18 CDT 2006

Seems like this might be a possible intrusion. To begin with, you will want
to check your computer for spyware, probware, etc. by following the
comprehensive malware removal instructions on the detailed malware removal
page of my website: www.freewebs.com/stopmalware Once you are clean, the
first recommendation I have is to change your password. Furthermore, I'd
check if I had an updated and functioning firewall. Also, I've edited some
safety tips that were given to me by MS-MVP Stanley Shenan on the Safety
tips page of my website.


"Marvel" <marvel.smith@gmail.com> wrote in message
news:%23Mzx5sffGHA.1272@TK2MSFTNGP03.phx.gbl...
>I was at work and checked my e-mail on my laptop there was a new mail
>message to me from my home computers hard drive (the home computer was on,
>no one was home) the subject line read short joke and the text of the
>message read check it out and it had half of my password, next there was a
>hyperlink to a site.
> I dont know where to start protecting
>
>



Re: possible system intruder XP by Marvel

Marvel
Mon May 22 19:24:19 CDT 2006

Thank You I will let you know how and when it works out.
>
"Elendil" <elendil.faithful@gmail.com> wrote in message
news:eTCMB5ffGHA.4880@TK2MSFTNGP03.phx.gbl...
> Seems like this might be a possible intrusion. To begin with, you will
> want to check your computer for spyware, probware, etc. by following the
> comprehensive malware removal instructions on the detailed malware removal
> page of my website: www.freewebs.com/stopmalware Once you are clean, the
> first recommendation I have is to change your password. Furthermore, I'd
> check if I had an updated and functioning firewall. Also, I've edited some
> safety tips that were given to me by MS-MVP Stanley Shenan on the Safety
> tips page of my website.
>
>
> "Marvel" <marvel.smith@gmail.com> wrote in message
> news:%23Mzx5sffGHA.1272@TK2MSFTNGP03.phx.gbl...
>>I was at work and checked my e-mail on my laptop there was a new mail
>>message to me from my home computers hard drive (the home computer was on,
>>no one was home) the subject line read short joke and the text of the
>>message read check it out and it had half of my password, next there was
>>a hyperlink to a site.
>> I dont know where to start protecting
>>
>>
>
>



Re: possible system intruder XP by Imhotep

Imhotep
Tue May 23 00:10:34 CDT 2006

Marvel wrote:

> I was at work and checked my e-mail on my laptop there was a new mail
> message to me from my home computers hard drive (the home computer was on,
> no one was home) the subject line read short joke and the text of the
> message read check it out and it had half of my password, next there was
> a hyperlink to a site.
> I dont know where to start protecting


...think about getting a Mac...

Re: possible system intruder XP by Elendil

Elendil
Tue May 23 16:30:05 CDT 2006

What does this have to do with anything? Macs have been breached before.


"Imhotep" <imhotep@nospam.com> wrote in message
news:o7ydnb2lI4LXBO_ZnZ2dnUVZ_smdnZ2d@adelphia.com...
> Marvel wrote:
>
>> I was at work and checked my e-mail on my laptop there was a new mail
>> message to me from my home computers hard drive (the home computer was
>> on,
>> no one was home) the subject line read short joke and the text of the
>> message read check it out and it had half of my password, next there was
>> a hyperlink to a site.
>> I dont know where to start protecting
>
>
> ...think about getting a Mac...



Re: possible system intruder XP by Marvel

Marvel
Tue May 23 19:18:01 CDT 2006


"Imhotep" <imhotep@nospam.com> wrote in message
news:o7ydnb2lI4LXBO_ZnZ2dnUVZ_smdnZ2d@adelphia.com...
> Marvel wrote:
>
>> I was at work and checked my e-mail on my laptop there was a new mail
>> message to me from my home computers hard drive (the home computer was
>> on,
>> no one was home) the subject line read short joke and the text of the
>> message read check it out and it had half of my password, next there was
>> a hyperlink to a site.
>> I dont know where to start protecting
>
>
> ...think about getting a Mac...
Actually I had, what are the advantages?



Re: possible system intruder XP by Alun

Alun
Tue May 23 20:20:59 CDT 2006

Marvel wrote:
> I was at work and checked my e-mail on my laptop there was a new mail
> message to me from my home computers hard drive (the home computer
> was on, no one was home) the subject line read short joke and the
> text of the message read check it out and it had half of my password,
> next there was a hyperlink to a site.
> I dont know where to start protecting

You also don't know that the message was really "from my home computers hard
drive", unless it contains information that can only have come from your
hard drive.

Think of email as being a little bit (but not a lot) like regular postal
mail - except everything is sent using postcards, with no envelopes to
shield the content. How do you tell whether a message came from someone you
know? You look in the top left corner of the postcard, where the sender is
supposed to write their address.

So, if I send you a postcard, and in the top left-hand corner of it, write
"President George W Bush, 1600 Pennsylvania Avenue, Washington DC, USA",
does that mean that when you receive it, it came from the President?

I don't think so - for starters, I'm ineligible to hold that position, no
matter what I might change my name to.

Similarly, when an email comes in to your computer, you should distrust
everything about it until such time as there is anything that confirms its
source.

Always seek the simplest explanation for what happened - in this case,
unless unique information from your hard drive was revealed in this email,
assume that this was just a random spam.

Alun.
~~~~
[Please don't email posters, if a Usenet response is appropriate.]
--
Texas Imperial Software | Find us at http://www.wftpd.com or email
23921 57th Ave SE | alun@wftpd.com.
Washington WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.



Re: possible system intruder XP by Marvel

Marvel
Tue May 23 20:43:29 CDT 2006


"Alun Jones" <alun@texis.invalid> wrote in message
news:oJudnVmcfNJhKe7ZnZ2dnUVZ_s-dnZ2d@comcast.com...
> Marvel wrote:
>> I was at work and checked my e-mail on my laptop there was a new mail
>> message to me from my home computers hard drive (the home computer
>> was on, no one was home) the subject line read short joke and the
>> text of the message read check it out and it had half of my password,
>> next there was a hyperlink to a site.
>> I dont know where to start protecting
>
> You also don't know that the message was really "from my home computers
> hard drive", unless it contains information that can only have come from
> your hard drive.
>
> Think of email as being a little bit (but not a lot) like regular postal
> mail - except everything is sent using postcards, with no envelopes to
> shield the content. How do you tell whether a message came from someone
> you know? You look in the top left corner of the postcard, where the
> sender is supposed to write their address.
>
> So, if I send you a postcard, and in the top left-hand corner of it, write
> "President George W Bush, 1600 Pennsylvania Avenue, Washington DC, USA",
> does that mean that when you receive it, it came from the President?
>
> I don't think so - for starters, I'm ineligible to hold that position, no
> matter what I might change my name to.
>
> Similarly, when an email comes in to your computer, you should distrust
> everything about it until such time as there is anything that confirms its
> source.
>
> Always seek the simplest explanation for what happened - in this case,
> unless unique information from your hard drive was revealed in this email,
> assume that this was just a random spam.
>
> Alun.
> ~~~~
> [Please don't email posters, if a Usenet response is appropriate.]
> --
> Texas Imperial Software | Find us at http://www.wftpd.com or email
> 23921 57th Ave SE | alun@wftpd.com.
> Washington WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
> Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.
>
>
Alun, I agree with you... the reason I stated it in my was from my hard
drive is, instead of c: or h: or etc... my hard drive was named Ralph (which
I changed at once) Maybe they wanted me to know they knew.
Also it was from my roadrunner e-mail account (I use OE) to my work account
kinda odd instead of being from Marvel@roadrunner it was just plain Ralph,
and still it didn't contain any more than that.
Thanks
>



Re: possible system intruder XP by Alun

Alun
Wed May 24 21:37:05 CDT 2006

Marvel wrote:
> "Alun Jones" <alun@texis.invalid> wrote in message
> news:oJudnVmcfNJhKe7ZnZ2dnUVZ_s-dnZ2d@comcast.com...
>> Always seek the simplest explanation for what happened - in this
>> case, unless unique information from your hard drive was revealed in
>> this email, assume that this was just a random spam.
>>
> Alun, I agree with you... the reason I stated it in my was from my
> hard drive is, instead of c: or h: or etc... my hard drive was named
> Ralph (which I changed at once) Maybe they wanted me to know they
> knew.

Uh... yeah.

Again, always seek the simple explanation. I have spam from Doug, Jim,
Dave, and a bunch of other people. I bet if I took a look, I'd find one
from Ralph, too.

If your hard drive was called "Zdephulon Beta 3", and you got an email from
that name, there might be a reason to be concerned.

> Also it was from my roadrunner e-mail account (I use OE) to my work
> account kinda odd instead of being from Marvel@roadrunner it was just
> plain Ralph, and still it didn't contain any more than that.

Again, anyone can put anything in the "From" address. Anything. Anything
at all.

To make you open it, they try and guess names - names of people, like
"Ralph" - that might make you say "oh, this email is from Ralph".

Alun.
~~~~
[Please don't email posters, if a Usenet response is appropriate.]
--
Texas Imperial Software | Find us at http://www.wftpd.com or email
23921 57th Ave SE | alun@wftpd.com.
Washington WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.



Re: possible system intruder XP by Patrick

Patrick
Wed May 24 23:39:31 CDT 2006

"Marvel" <marvel.smith@gmail.com> wrote in message
news:ujx5EesfGHA.2188@TK2MSFTNGP05.phx.gbl...
>
> "Imhotep" <imhotep@nospam.com> wrote in message
> news:o7ydnb2lI4LXBO_ZnZ2dnUVZ_smdnZ2d@adelphia.com...
>> Marvel wrote:
>>
>>> I was at work and checked my e-mail on my laptop there was a new mail
>>> message to me from my home computers hard drive (the home computer was
>>> on,
>>> no one was home) the subject line read short joke and the text of the
>>> message read check it out and it had half of my password, next there
>>> was
>>> a hyperlink to a site.
>>> I dont know where to start protecting
>>
>>
>> ...think about getting a Mac...
> Actually I had, what are the advantages?
>


Fewer people are using them, so fewer viruses and malware are aimed at them.
But, you also want to look at the disadvantages as well. Such as, some of
the programs that you like to (or have to) use aren't going to be
compatible. There's also the cost issue.

I've harped on Imhotep about macs in other posts, but I'll refrain from it
here. Until and even if you decide to buy a Mac, you need to make sure that
your Windows computer is updated completely, and hardened as much as
possible (security-wise). I would look to what David Lipman, Malke,
Panda_Man and a few others (I don't want to go through all of the posts in
the newsgroup to name everyone) suggest-- before you do something drastic as
buying a different computer.

Some of the steps will include (but not limited to):

1. After you've successfully cleaned your computer of any
spyware/viruses/malware, make sure you have a good antivirus solution.
While NO ONE can say for certain which antivirus is the best, I think we'll
all agree that you need real-time protection and that it needs to be allowed
to update whenever it needs to.

2. At a minimum, every second Tuesday of each month, allow Automatic
Updates to get the latest patches from Microsoft. I would actually say
"Allow Automatic Updates to get the latest patches from Microsoft whenever
they are released", but at a minimum do it every month on "Patch Tuesday."

3. Make sure you have a good firewall. Like the Antivirus step, no one
here can say "This firewall is the best." But we'll all agree that it's
only as effective as you let it be. You need to allow it to check for
updates (Yes, Firewalls get updated also). And, you need to use common
sense when it comes to allowing programs access. If it's not one that
you've heard of, you need to research the program a little BEFORE you grant
or block it.

4. As far as antispyware goes, IMHO, you want to have at least two or three
different ones installed (Note, I said Installed and not running). Only one
of them should be constantly running (real time protection or Resident
protection). The others should be used on a periodic basis to back the main
one up. We all have our favorites. Personally, I use (and recommend)
Windows Defender, Lavasoft's Ad-Aware, SpyBot S&D, and Sunbelt's CounterSpy.
Others will say they don't like Windows Defender, because it's in beta.
That's why I back it up with at least one or two of the others.

There are a lot of other things that I haven't mentioned. I believe David
or Shenan posts something like 13 tips that you should follow. The most
important thing is use common sense. Be careful where you surf, and don't
open suspicious e-mails (or attachments).

HTH a little bit.
--
Patrick Dickey
Smile... Someone out there cares deeply for you.
http://www.pats-computer-solutions.com
http://www.microsoft.com/protect
http://update.microsoft.com


Re: possible system intruder XP by Marvel

Marvel
Thu May 25 19:50:46 CDT 2006


"Alun Jones" <alun@texis.invalid> wrote in message
news:CYadnT2qH6PPhejZnZ2dnUVZ_tmdnZ2d@comcast.com...
> Marvel wrote:
>> "Alun Jones" <alun@texis.invalid> wrote in message
>> news:oJudnVmcfNJhKe7ZnZ2dnUVZ_s-dnZ2d@comcast.com...
>>> Always seek the simplest explanation for what happened - in this
>>> case, unless unique information from your hard drive was revealed in
>>> this email, assume that this was just a random spam.
>>>
>> Alun, I agree with you... the reason I stated it in my was from my
>> hard drive is, instead of c: or h: or etc... my hard drive was named
>> Ralph (which I changed at once) Maybe they wanted me to know they
>> knew.
>
> Uh... yeah.
>
> Again, always seek the simple explanation. I have spam from Doug, Jim,
> Dave, and a bunch of other people. I bet if I took a look, I'd find one
> from Ralph, too.
>
> If your hard drive was called "Zdephulon Beta 3", and you got an email
> from that name, there might be a reason to be concerned.
>
>> Also it was from my roadrunner e-mail account (I use OE) to my work
>> account kinda odd instead of being from Marvel@roadrunner it was just
>> plain Ralph, and still it didn't contain any more than that.
>
> Again, anyone can put anything in the "From" address. Anything. Anything
> at all.
>
> To make you open it, they try and guess names - names of people, like
> "Ralph" - that might make you say "oh, this email is from Ralph".
>
> Alun.
> ~~~~
> [Please don't email posters, if a Usenet response is appropriate.]
> --
> Texas Imperial Software | Find us at http://www.wftpd.com or email
> 23921 57th Ave SE | alun@wftpd.com.
> Washington WA 98072-8661 | WFTPD, WFTPD Pro are Windows FTP servers.
> Fax/Voice +1(425)807-1787 | Try our NEW client software, WFTPD Explorer.
>
>
Well, I am going to give it a unique name just to be safe as I follow the
advice contained herein