Suspicious e-mails in my hotmail account

[T O M M Y]

I just did not check my e-mail account for 7 days, and today checking it , found the following e-mails in my inbox:


1- From: Microsoft Corporation Program Se Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance Subject: net update Size: 130KB

3- From: Admin Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center Subject: Newest Net Update Size: 145KB

5- From: Admin Subject: Message Size : 125KB

6- From: Network Security Section Subject: "NO SUBJECT" Size : 150KB


All these messages had attachments and they'd filled my 2 Mb hotmail account in less than one week . The thing is that I had never received those e-mails from those senders before. I have had never told Microsoft of my e-mail account...Also , who is the Admin? sending 150KB e-mails?

Has anybody else received such e-mails like me? Can those e-mails contain the SobigF@Worm? I deleted all of them as soon as I saw them in my inbox, Did I do the right thing? And how can I stop further activities like that?

Your help is much regarded

 

[T O M M Y]

PS: Agian I recieved a message from : Microsoft Network Email Storage , with an .exe attachment, which was identified as harmful by Zonealarm
The message sourse:

X-Message-Info: pdGgd64CkwYBecCeulYyOUPb8nhFYKh1qpbh2VmgBRM=
Received: from mc4-f18.hotmail.com ([65.54.237.153]) by mc4-s12.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 09:41:56 -0700
Received: from smtp-out4.blueyonder.co.uk ([195.188.213.7]) by mc4-f18.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 09:40:44 -0700
Received: from wzbp ([82.42.53.252]) by smtp-out4.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 17:32:16 +0100
FROM: "Microsoft Network Email Storage Service" <[email protected]>
TO: " " <[email protected]>
SUBJECT: Notice
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="jhpeyftxy"
Return-Path: (e-mail address removed)
Message-ID: <[email protected]>
X-OriginalArrivalTime: 22 Sep 2003 16:32:17.0067 (UTC) FILETIME=[1614B7B0:01C38127]
Date: 22 Sep 2003 17:32:17 +0100


I just did not check my e-mail account for 7 days, and today checking it , found the following e-mails in my inbox:


1- From: Microsoft Corporation Program Se Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance Subject: net update Size: 130KB

3- From: Admin Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center Subject: Newest Net Update Size: 145KB

5- From: Admin Subject: Message Size : 125KB

6- From: Network Security Section Subject: "NO SUBJECT" Size : 150KB


All these messages had attachments and they'd filled my 2 Mb hotmail account in less than one week . The thing is that I had never received those e-mails from those senders before. I have had never told Microsoft of my e-mail account...Also , who is the Admin? sending 150KB e-mails?

Has anybody else received such e-mails like me? Can those e-mails contain the SobigF@Worm? I deleted all of them as soon as I saw them in my inbox, Did I do the right thing? And how can I stop further activities like that?

Your help is much regarded

 

[T O M M Y]

Dear PA Bear ,

Yes, I have always tried to keep my hotmail account free from spams
and these kind of messages, therefore used filter and rules in
the hotmail's online page( as you said) many times ago.The rules are :

1-Lead all incoming messages with the sender not in my address book to "
junk folder" ( using safe list)
2-setting the junk filter to "Medium" .

As I said, I had never before received any e-mails form Microsoft or Admin
or such addresses before.
I always try to keep conscious when opening unknown e-mails.
Today after receiving those e-mails , I added some new rules to my hotmail
account , using "Subject line blocking" and "block sender" ( I blocked
(e-mail address removed) , which sent me the "Admin" message)
Not after 1 hour setting up those rules , I received 2 other suspicious
messages from Microsoft again, now with different subjects, and with 145KB
attachments....)

Do I have to receive these e-mail and set up rules in a do-it-forever
circle? How long will it last to get rid of these messages?
Can't Microsoft put some tools in Hotmail service to delete messages with
these Subjects from its server? ( Since they are posted from different
sources and it is impossible to block thousands of sender-infected
computers-).

Thanks in advance

 

[T O M M Y]

I have always my firewall on , run my updated McAfee, and keep conscious....

 

[Sven Zallmann]

I just did not check my e-mail account for 7 days, and today checking it , found the following e-mails in my inbox:

[listing 6 emails]

You're not really making a fuss about the enormous amount of 6 (in
words: six) bogus emails containing the Swen.A (a.k.a. Gibe.F)
worm, are you? Wait until you receive thousands of them....

And, please, disable posting in HTML format, thus saving bandwidth
and server disk space....

 

[Guest]

Hello Tommy,

Please, please, please... DELETE ALL OF THESE MESSAGES. Microsoft would never send out an attachment to you when you can simply go to their web site and download what you need. It is very obvious these messages contain virus related material in one form or another.

First rule of thumb, if you don't know who an email message is from, simply delete it. What could it possibly have that you need?

PS: Agian I recieved a message from : Microsoft Network Email Storage , with an .exe attachment, which was identified as harmful by Zonealarm
The message sourse:

X-Message-Info: pdGgd64CkwYBecCeulYyOUPb8nhFYKh1qpbh2VmgBRM=
Received: from mc4-f18.hotmail.com ([65.54.237.153]) by mc4-s12.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 09:41:56 -0700
Received: from smtp-out4.blueyonder.co.uk ([195.188.213.7]) by mc4-f18.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 09:40:44 -0700
Received: from wzbp ([82.42.53.252]) by smtp-out4.blueyonder.co.uk with Microsoft SMTPSVC(5.0.2195.5600);
Mon, 22 Sep 2003 17:32:16 +0100
FROM: "Microsoft Network Email Storage Service" <[email protected]>
TO: " " <[email protected]>
SUBJECT: Notice
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="jhpeyftxy"
Return-Path: (e-mail address removed)
Message-ID: <[email protected]>
X-OriginalArrivalTime: 22 Sep 2003 16:32:17.0067 (UTC) FILETIME=[1614B7B0:01C38127]
Date: 22 Sep 2003 17:32:17 +0100


I just did not check my e-mail account for 7 days, and today checking it , found the following e-mails in my inbox:


1- From: Microsoft Corporation Program Se Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance Subject: net update Size: 130KB

3- From: Admin Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center Subject: Newest Net Update Size: 145KB

5- From: Admin Subject: Message Size : 125KB

6- From: Network Security Section Subject: "NO SUBJECT" Size : 150KB


All these messages had attachments and they'd filled my 2 Mb hotmail account in less than one week . The thing is that I had never received those e-mails from those senders before. I have had never told Microsoft of my e-mail account...Also , who is the Admin? sending 150KB e-mails?

Has anybody else received such e-mails like me? Can those e-mails contain the SobigF@Worm? I deleted all of them as soon as I saw them in my inbox, Did I do the right thing? And how can I stop further activities like that?

Your help is much regarded

 

[PA Bear]

This is the first I've seen of Trojan virus-laden messages arriving in a
Hotmail account, Tommy. Usually the Hotmail server-side scanners catch and
delete them.

Have you used the filters available at your Hotmail online page
(Options>Mail Delivery) to filter out such messages?
--
HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE)
http://mvp.support.microsoft.com

:
I just did not check my e-mail account for 7 days, and today checking it ,
found the following e-mails in my inbox.
<snip>

 

[Jupiter Jones [MVP]]

Tommy;
Microsoft NEVER sends Email with attachments.
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/news/patch_hoax.asp
NEVER open a unexpected attachment.
Verify with sender before opening an attachment.

To protect the safety and security of your computer:
Install or enable a firewall IMMEDIATELY, before connecting to the
internet:
http://support.microsoft.com/?kbid=283673

Install ALL Critical Updates IMMEDIATELY.
Start/All Programs/Windows Update

Install an antivirus application
Update it weekly
Run it at least weekly

Also see:
http://www.microsoft.com/security/protect/default.asp
http://www.microsoft.com/security/home/
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/column

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html

I just did not check my e-mail account for 7 days, and today checking
it , found the following e-mails in my inbox:


1- From: Microsoft Corporation Program Se
Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance
Subject: net update Size: 130KB

3- From: Admin
Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center
Subject: Newest Net Update Size: 145KB

5- From: Admin
Subject: Message Size : 125KB

6- From: Network Security Section
Subject: "NO SUBJECT" Size : 150KB


All these messages had attachments and they'd filled my 2 Mb hotmail
account in less than one week . The thing is that I had never received
those e-mails from those senders before. I have had never told
Microsoft of my e-mail account...Also , who is the Admin? sending
150KB e-mails?

Has anybody else received such e-mails like me? Can those e-mails
contain the SobigF@Worm? I deleted all of them as soon as I saw them
in my inbox, Did I do the right thing? And how can I stop further
activities like that?

Your help is much regarded

 

[Corinne Rainbow]

NewsGroups : T O M M Y
nous a dit / has told us

I just did not check my e-mail account for 7 days, and today
checking it , found the following e-mails in my inbox:


1- From: Microsoft Corporation Program Se
Subject: Network security Upgrade Size: 143KB

2- From: Public Assistance
Subject: net update Size: 130KB

3- From: Admin
Subject: Error Letter Size: 150KB

4- From: MS Corporation Security Center
Subject: Newest Net Update Size: 145KB

5- From: Admin
Subject: Message Size : 125KB

6- From: Network Security Section
Subject: "NO SUBJECT" Size : 150KB


All these messages had attachments and they'd filled my 2 Mb
hotmail account in less than one week . The thing is that I had
never received those e-mails from those senders before. I have
had never told Microsoft of my e-mail account...Also , who is the
Admin? sending 150KB e-mails?

Has anybody else received such e-mails like me? Can those e-mails
contain the SobigF@Worm? I deleted all of them as soon as I saw
them in my inbox, Did I do the right thing? And how can I stop
further activities like that?

Your help is much regarded

It is not coming from Microsoft, it is most probably swen or another
virus of the same kind.
just delete it and use mail rules (but hotmail hasn't many
possibilities of rules)

 

[PA Bear]

As I stated earlier, this is the first incidence I've seen of such emails
arriving in a Hotmail account, whether online or in a Mail Client. What
you're seeing baffles me. Even though I have only a few Hotmail filters set
up, I have yet to receive one such message in the account but have received
multiple hundreds in POP3 accounts.[/QUOTE]

 

[Wanderer]

Hi, I'm also have Hotmail and I'm still trying to keep the Microsoft spam
out. Have you been successful so far?
If so any info would help thanks.

 

[T O M M Y]

Hi Wander

I recently used Hotmail filters and haven't received any more of those messages so far:
Do the followings

1- I your hotmail online page choose "Options">"Custom Filters">"Advanced Filter "

2- In "step 1: Filter Criteria" choose this:

If - From name- contains- microsoft ( or MS --Add MS the next time you come to this page--)

3- In " step 2 : Folder" check "Delete these messages "

(Since Microsoft does not sent any patches or updates to anyone, you will be sure you have done the right thing.)

4- After pressing OK , go to the filters page, check all filter boxes and choose "Apply now"

Hope this help

 

[Frank]

I, too, have been receiving strange emails in my hotmail
account (about 144kb-156kb in size) regarding emails that
were undeliverable, a couple from the Postmaster. Since
I had sent some emails recently I opened these to see
what the problem was. The message was something to the
effect " Sorry, we have not been able to deliver the
email to the following address ..., Which had nothing to
do with the emails that I sent out. I immediately
deleted these emails and scanned my computer and the C
drive for virus. PABear thought Tommy's messages might
be a Trojan virus-laden message "This is the first I've
seen of Trojan virus-laden messages arriving in a Hotmail
account, Tommy. Usually the Hotmail server-side scanners
catch and delete them." However, my virus program found
no viruses on my computer. Any other thoughts about what
these messages are and why they are getting through
hotmail's check system?

-----Original Message-----
I just did not check my e-mail account for 7 days, and

today checking it , found the following e-mails in my
inbox:

1- From: Microsoft Corporation Program

Se Subject: Network security
Upgrade Size: 143KB

2- From: Public

Assistance
Subject: net update Size:
130KB

3- From:

Admin
Subject: Error Letter
Size: 150KB

4- From: MS Corporation Security

Center Subject: Newest Net
Update Size: 145KB

5- From:

Admin
Subject: Message
Size : 125KB

6- From: Network Security

Section Subject: "NO
SUBJECT" Size : 150KB

All these messages had attachments and they'd filled my

2 Mb hotmail account in less than one week . The thing is
that I had never received those e-mails from those
senders before. I have had never told Microsoft of my e-
mail account...Also , who is the Admin? sending 150KB e-
mails?

Has anybody else received such e-mails like me? Can

those e-mails contain the SobigF@Worm? I deleted all of
them as soon as I saw them in my inbox, Did I do the
right thing? And how can I stop further activities like
that?