Re: [BLACKBOX] setting for your mailbox blackbox{([at]})nowhere.xy

From: [at]} <Treutwein>
Date: Wed, 19 May 2010 17:18:49 +0200

----boundary-LibPST-iamunique-738169662_-_-
Content-type: text/plain

our mail-proxy removed the attachment and warned:

This attachment contained a virus and was stripped.
        Filename: card.zip
        Content-Type: application/zip
        Virus(es): Mal/BredoZp-B
                Troj/Bredo-CR

--
  Bernhard 
 
> -----Original Message-----
> From: BlackBox [mailto:BLACKBOX{([at]})nowhere.xy> Gunnar Bernhardt
> Sent: Wednesday, May 19, 2010 7:56 AM
> To: BLACKBOX{([at]})nowhere.xy> Subject: Re: [BLACKBOX] setting for your mailbox 
> blackbox{([at]})nowhere.xy> 
> 
> It appears this message was sent by
> 
> 	owner-blackbox{([at]})nowhere.xy> 
> My mail provider did not deliver it, since it detected the 
> following virus in it:
> 
> 	Trojan:W32/TDSS.FQ
> 
> 
> So it might be a good idea not to open it as Doug said.
> 
> greetings
> gunnar
> 
> 
> Wojtek Skulski schrieb:
> > I did not receive any such message.
> >
> > Most definitely a trojan.
> >
> > W.
> >
> >
> > On Tue, 18 May 2010, Douglas G. Danforth wrote:
> >
> >> Is this message spam?
> >>
> >> The zip file contains 'card.exe' which I am definitely not
> >> going to open or execute.
> >>
> >> Who sent this?
> >>
> >> -Doug Dafnrth
> >>
> >>
> >> oberon.ch support wrote:
> >>       SMTP and POP3 servers for blackbox{([at]})nowhere.xy> >> changed. Please carefully
> >>       read the attached instructions before updating settings.
> >>
> >>
> >>       ----
> >>       To unsubscribe, send a message with body "SIGNOFF 
> BLACKBOX" to
> >>       LISTSERV{([at]})nowhere.xy> >>
> >> ---- To unsubscribe, send a message with body "SIGNOFF 
> BLACKBOX" to 
> >> LISTSERV{([at]})nowhere.xy> >>
> >>
> >>
> >
> >
> > ----
> > To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to 
> > LISTSERV{([at]})nowhere.xy> >
> 
> 
> ----
> To unsubscribe, send a message with body "SIGNOFF BLACKBOX" 
> to LISTSERV{([at]})nowhere.xy> 
----
To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to LISTSERV{([at]})nowhere.xy----boundary-LibPST-iamunique-738169662_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"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----boundary-LibPST-iamunique-738169662_-_---

Received on Wed May 19 2010 - 17:18:49 UTC