[meteorite-list] WARNING!!! POSSIBLE VIRUS!!! [Fwd: Important notify about youre-mail account.]

From: Sterling K. Webb <kelly_at_meteoritecentral.com>
Date: Thu Apr 22 10:32:46 2004
Message-ID: <4046777E.B6DA5137_at_bhil.com>

Hi, Norbert, List,

    This is the bagel.j worm that I just posted about. Each scam letter
is created with the name of the email recipient's ISP taken from the
recipient's email address.
    Only you, Norbert, will receive a scam letter with rocksonfire.com
as the server and only because you maintain that domain. Others will get
a message taylored to their own individual ISP, whether that be AOL or
hotmail.com or yahoo.com or...
    Norton will kill it but many spam and virus scanners are defeated by
the fact that it's password protected. This prevents the scanning
program from opening the file and checking its contents.
    Obviously, it's going out to most if not all of the List right now.
    Everyone, DON'T OPEN THE ATTACHMENT!


Sterling K. Webb
--------------------------------------------------------------------
ROCKS ON FIRE wrote:

> Hello list,
>
> I am not sure if anyone of you got one e-mail like this one from
> "support_at_rocksonfire.com" or similar. This e-mail had a virus attached
> and was deleted by NORTON Antivirus Protection. Do not open!
> support_at_rocksonfire.com, this e-mail address does not exist.
>
> Please let me know if anyone of you has received such an e-mail.
>
> My sincere appologies for any inconveniance caused!
> Best regards from DOWN-UNDER,
>
> Norbert & Heike Kammel
> ROCKS ON FIRE
> IMCA #3420
> www.rocksonfire.com
>
>
> -------- Original Message --------
>
  Subject: Important notify about your e-mail account.
     Date: Wed, 03 Mar 2004 00:07:17 -0800
     From: support_at_rocksonfire.com
       To: meteorites_at_rocksonfire.com
>
>
>
> Dear user, the management of Rocksonfire.com mailing system wants to let you know that,
>
> Your e-mail account has been temporary disabled because of unauthorized access.
>
> For more information see the attached file.
>
> For security purposes the attached file is password protected. Password is "37537".
>
> Sincerely,
> The Rocksonfire.com team http://www.rocksonfire.com
>
>
>
>
>
>
Received on Wed 03 Mar 2004 07:25:35 PM PST