Beware of virus-infected message allegedly sent by Facebook


The following message is my ISP’s response to an obvious piece of junk mail and should be deleted immediately if you see it on your computer, as the email address that it was sent to is not registered with Facebook. If unsure about the legitimacy of a message, take a look at its long headers or raw source for clues.

Your Mail Virus Protection detected the virus ‘Suspicious.MH690’ in the file ‘Facebook_password_4578.zip’, attached to the enclosed email message. We scanned the file using Norton AntiVirus but were unable to clean it. Therefore, we removed the content of the attachment from the message. Please contact the message sender if you want to receive the attachment. They must clean the file and resend it before we can deliver it to you safely.

Click below to view the raw source.

Received: from 207.115.20.158 (EHLO flpd241.prodigy.net) (207.115.20.158)
by mta120.sbc.mail.gq1.yahoo.com with SMTP; Wed, 17 Mar 2010 01:51:45 -0700
X-Header-Overseas: Mail.from.Overseas.source.78.141.35.34
X-Originating-IP: [78.141.35.34]
Received: from 78-141-35-34.rdns.as8401.net (78-141-35-34.rdns.as8401.net [78.141.35.34])
by flpd241.prodigy.net (8.13.8 inb ipv6 jeff0203/8.13.8) with ESMTP id o2H8pbf8016383;
Wed, 17 Mar 2010 01:51:39 -0700
Received: from 78.141.35.34 by mailwash27.pair.com; Wed, 17 Mar 2010 08:51:37 +0000
Date: Wed, 17 Mar 2010 08:51:37 +0000
From: “The Facebook Team” service@facebook.com
X-Mailer: The Bat! (v3.80.06) Educational
Reply-To: sanguining9522@cmpcmm.com
X-Priority: 3 (Normal)
Message-ID:
Subject: Facebook Password Reset Confirmation NR.9320
MIME-Version: 1.0
Content-Type: multipart/mixed;
Reply-To: sanguining9522@cmpcmm.com

Hey knelson,
Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document.

Thanks,
The Facebook Team

*** BREAKING NEWS ***

NationalTerrorAlert.com published a report on March 17 that confirmed the propagation of this virus that targets Facebook users.

Advertisements

Leave a comment

Filed under security, Viruses and Spam

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s