Is this a virus or???
in [Anti-Virus]
|
From: MZB on 9 Mar 2010 17:38 Beaure: Oh. I got the email at my personal account from my Yahoo account. (My personal account is listed in my Yahoo address book). So, can't I use that? I am just another recipient, right? I ran Avira and nothing showed up. I'll run Malwarebytes next. I did change my Yahoo password. Mel "Beauregard T. Shagnasty" <a.nony.mous(a)example.invalid> wrote in message news:hn6d88$d96$1(a)news.eternal-september.org... > MZB wrote: > >> Can you help me with this? >> I have OE. >> I right click and go to properties and then details, but I cannot tell >> which is the IP Address I want to look up. There is nso much >> information there. > > Look through the: Received from: ... > lines, probably the first one you encounter. Without seeing the headers, > I can't say much more. > > Wait. Is this header forwarded to you by one of the people who got the > spam from you? You need to see theirs, not one of your received mails. > > Please don't top-post. > > -- > -bts > -Four wheels carry the body; two wheels move the soul
From: MZB on 9 Mar 2010 17:39 David: I wonder how that happens. They somehow got my Yahoo email address (easy) and my Yahoo password. Hmmmm Mel "David H. Lipman" <DLipman~nospam~@Verizon.Net> wrote in message news:hn6i04031c4(a)news3.newsguy.com... > From: "MZB" <moo(a)noway.prudigy.net> > > | I have a charter account (main one) and use a Yahoo email account. > > | Apparently, everyone from my Yahoo address book got an email (from me) > with > | some link (I think to a drug site). > > | Does this mean I have a virus? If so, what kind/type? > > | I'm going to run my Avira and Malwarebytes. > > | Mel > > > It could mean your Yahoo account was compramised. > > -- > Dave > http://www.claymania.com/removal-trojan-adware.html > Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp > >
From: MZB on 9 Mar 2010 18:24 It says 10.10.200.6 Whois mentions it is IANA(Internet Assigned Numbers Authority) out of Marina Del Rey (Calif). Not sure what this means. Mel "Beauregard T. Shagnasty" <a.nony.mous(a)example.invalid> wrote in message news:hn6d88$d96$1(a)news.eternal-september.org... > MZB wrote: > >> Can you help me with this? >> I have OE. >> I right click and go to properties and then details, but I cannot tell >> which is the IP Address I want to look up. There is nso much >> information there. > > Look through the: Received from: ... > lines, probably the first one you encounter. Without seeing the headers, > I can't say much more. > > Wait. Is this header forwarded to you by one of the people who got the > spam from you? You need to see theirs, not one of your received mails. > > Please don't top-post. > > -- > -bts > -Four wheels carry the body; two wheels move the soul
From: David H. Lipman on 9 Mar 2010 19:57 From: "MZB" <moo(a)noway.prudigy.net> | David: | I wonder how that happens. They somehow got my Yahoo email address (easy) | and my Yahoo password. Hmmmm | Mel Multiple ways now... Scenario 1: Your PC is infected with Malware. It scans your IE and FireFox password stores and steals credentials, including your "Yahoo! Account". The credentials are then sent to a third party web site to be parked and waiting for pickup. The Malicious actor gathers credentials and uses them against you and for his gain. Scenario 2: You are infected with a keylogging trojan. It catures and your keystokes and and then the credentials are sent to a third party web site to be parked and waiting for pickup. The Malicious actor gathers those credentials and... Scenario 3: You advertanly realeased the account information. To name a few... -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp
From: David H. Lipman on 9 Mar 2010 19:58
From: "MZB" <moo(a)noway.prudigy.net> | It says 10.10.200.6 | Whois mentions it is IANA(Internet Assigned Numbers Authority) out of Marina | Del Rey (Calif). | Not sure what this means. | Mel That's a private address on the LAN side of a NAT Router. -- Dave http://www.claymania.com/removal-trojan-adware.html Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp |