Wetlook World Forum

Current time: Sat 20/04/24 10:21:12 GMT

Translate page FROM -> TO

Translate page TO <- FROM

Message # 16816.1.1.1

Subject: Just the spammers, not an infection

Date: Mon 27/06/05 13:52:02 GMT

Name: Nigel

Email: nigel@wetlook.com

Website: www.wetlook.com

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help
with running costs: (you can change amount)

These sort of emails are 'guessed' at by spammers - webmaster@ admin@ system@ sales@ etc. The emails are often spammed with things that 'webmasters' might be interested in, e.g. hosting servicies, content pushers etc.

They just visit a whois database and pull out all the domain names, then add the range of suffixes and off they go... obviously, over time, these emails get passed around, and may end up on all sorts of lists, and used for spreading worms and viruses.

They are also 'catchy' names to grab people's attention, e.g. if your ISP is ntlworld.com and you get an email from webmaster@ntlworld.com, you are more likely to look at it...

Basically it doesn't mean that you, or anyone that knows you is or has been infected, they are just easily guessed names - in fact, it used to be 'normal' to accept email to 'webmaster@' and 'abuse@' as an easy way to contact a domains webmaster.

You will probably find that not only do you get email supposedly 'from' those addresses, but you will also receive lots of email TO those addresses - check your server, they may be slowly filling it up - the best thing, if your server supports it, is to either automatically dump them, or to do an 'autoresponder' saying that the email is closed, and giving the 'correct' one to use - but in a human readable form only, e.g. "sales@wetlook.com has been closed due to excessive spam, please contact n i g e l AT w e t l o o k DOT c o m ... etc"

Nigel

In reply to Message (16816.1.1)

Re: Likewise with our sites!

By AnthonyX - anthonyx@jowc.net Mon 27/06/05 12:11:55 GMT

Website:

Leon,

I get bogus emails apparently from jowc.net from time to time. It is not an indication that my system(s) are infected. It also does not mean anyone else will ever see such emails apparently from jowc. It does mean someone I have corresponded with has allowed their computer to become infected. In your case, all it means is that someone you've corresponded with has the virus on their computer. Noone but you is likely to ever get emails from "support@mostwet" or whatever.

I believe this worm/virus is nothing unusual in its technical design. Its only distinction is in the bait - the message you read, apparent sender, etc.. Email viruses can make themselves appear to come from any sending account. Like all email viruses/worms, this one scans the inbox/outbox on the infected computer for new target recipients, and sends itself to them. For each target email address it finds to send to, this virus invents a sender by substituting "admin@", "support@" or whatever in place of the recipient name. That way, the recipient is supposed to think that their ISP is sending them some important communication. It's just another tactic to trick you into opening an attachment which will infect your computer.

As with all viral emails, either known or suspected, the best thing you can do is simply delete it.

In reply to Message (16816.1)

Likewise with our sites!

By leonmoomin - leon@mostwet.com Mon 27/06/05 03:16:23 GMT

Website:

I have been receiving many e-mail from admin@mostwet.com, webmaster@mostwet.com, acounts@mostwet.com!

None of these are from us!

Here are the valid e-mail addresses:

leon@mostwet.com

leon@leonmoomin.net

flaviu@wetrom.com

Do not open or reply to any other e-mail address claiming to be from mostwet, they are NOT!

leonmoomin

In reply to Message (16816)

E-Mail Caution

By Rod and Elizabeth - rod@wetkernwife.com Sun 26/06/05 21:17:46 GMT

Website: www.wetkernwife.com

I just wanted to let everyone know about some kind of scam or e-mail problem that seems to be going around. I've personally gotten a few mails from odd e-mail addresses from our domain. I just wanted to let everyone know that there will never be a valid e-mail address from anyone but rod@ and elizabeth@ from the WetKernWife site. I've gotten some from admin@, system@, and webmaster@ from our domain and they have some kind of attachment. If anyone ever gets a mail from anyone but Elizabeth or myself, Rod, please don't open them, just delete them immediately.

Sorry for any problems.

Rod

Report Abuse or Problem to Nigel at Minxmovies
If you enjoy this forum, then please make a small donation to help with running costs: (you can change amount)