Re: [BLACKBOX] setting for your mailbox blackbox{([at]})nowhere.xy

From: [at]} <Gunnar>
Date: Wed, 19 May 2010 07:55:57 +0200

----boundary-LibPST-iamunique-702987407_-_-
Content-type: text/plain

It appears this message was sent by

        owner-blackbox{([at]})nowhere.xy

My mail provider did not deliver it, since it detected the following virus in it:

        Trojan:W32/TDSS.FQ


So it might be a good idea not to open it as Doug said.

greetings
gunnar


Wojtek Skulski schrieb:
> I did not receive any such message.
>
> Most definitely a trojan.
>
> W.
>
>
> On Tue, 18 May 2010, Douglas G. Danforth wrote:
>
>> Is this message spam?
>>
>> The zip file contains 'card.exe' which I am definitely not
>> going to open or execute.
>>
>> Who sent this?
>>
>> -Doug Dafnrth
>>
>>
>> oberon.ch support wrote:
>> SMTP and POP3 servers for blackbox{([at]})nowhere.xy
>> changed. Please carefully
>> read the attached instructions before updating settings.
>>
>>
>> ----
>> To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to
>> LISTSERV{([at]})nowhere.xy
>>
>> ---- To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to
>> LISTSERV{([at]})nowhere.xy
>>
>>
>>
>
>
> ----
> To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to
> LISTSERV{([at]})nowhere.xy
>

----
To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to LISTSERV{([at]})nowhere.xy----boundary-LibPST-iamunique-702987407_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"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=
----boundary-LibPST-iamunique-702987407_-_---

Received on Wed May 19 2010 - 07:55:57 UTC