Author Topic: support@hitechcreations.com virus email sent to me and crap i opened it (Read 1061 times)

Citabria · « **on:** November 14, 2004, 12:27:20 AM »

*** *** ***

got an email from support@hitechcreations and of course opened it without thinking and now i think i got some nasty trojan virus or some crap from the attachment i opened without thinking.

it said:

I don't bite, weah

password 170105

damn time to format c:\

Citabria · « **Reply #1 on:** November 14, 2004, 12:31:43 AM »

found that #@!#!~!~# bastard worm bagel 2 #@!#@! little punk hacker

htc check your email or scan it or somthing to see if your stuff is sending out that trojan out from your system because the email came from support@hitechcreations.com.

Fruda · « **Reply #2 on:** November 14, 2004, 12:49:35 AM »

Off topic

mason22 · « **Reply #3 on:** November 14, 2004, 12:53:26 AM »

people can "spoof" email addresses making it look like it came from someone but it really didnt.

anyone that has an email address on their website (ie. support at htc.com ) can be read by "spiders" that crawl through sites. These are used to "spoof and infect" others....

but then again, maybe its possible someone got infected at the office. who knows...

someone needs to do something about all this email spam / virus crap. way overboard on the rediculous level now.

Roscoroo · « **Reply #4 on:** November 14, 2004, 01:06:08 AM »

ive been getting alot of those password change emails too
5 of them in the last 3 weeks.

and since the info is correct on them i suspect its at HTC were the bug is ... OH SKUZZY !!! you better Give Jo-Anns pc the thorough check up.. pweeze.

heres the message source code just incase you'd like to attempt to decifer it.

X-Message-Info: JGTYoYF78jHstudmuffinP2HH+/D7NcnCRRwxWf
Received: from dns.hitechcreations.com ([216.91.192.1]) by mc12-f30.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
    Fri, 12 Nov 2004 12:35:24 -0800
Received: from beta.hitechcreations.com (beta.hitechcreations.com [216.91.192.19])
   by dns.hitechcreations.com (8.12.11/8.12.11) with ESMTP id iACKZMAs016381
   for ; Fri, 12 Nov 2004 14:35:22 -0600 (CST)
Received: from beta.hitechcreations.com (localhost [127.0.0.1])
   by beta.hitechcreations.com (8.12.11/8.12.11) with ESMTP id iACKZOFZ015572
   for ; Fri, 12 Nov 2004 14:35:24 -0600 (CST)
Received: (from root@localhost)
   by beta.hitechcreations.com (8.12.11/8.12.11/Submit) id iACKZOC0015571
   for Roscoroo@hotmail.com; Fri, 12 Nov 2004 14:35:24 -0600 (CST)
Date: Fri, 12 Nov 2004 14:35:24 -0600 (CST)
From: aceshigh@hitechcreations.com
Message-Id: <200411122035.iACKZOC0015571@beta.hitechcreations.com>
Subject: HTC Change of password notification.
To: undisclosed-recipients:;
Return-Path: aceshigh@hitechcreations.com
X-OriginalArrivalTime: 12 Nov 2004 20:35:24.0400 (UTC) FILETIME=[2310D700:01C4C8F7]

Your Login ID IS xxxxxxxxxxxx
Your Password IS xxxxxx

Note: I didnt catch a bug but then my pop3 email doesnt allow attachments to go thru in this addy.

BUG_EAF322 · « **Reply #5 on:** November 14, 2004, 08:21:02 AM »

that's the glory of big mouth
ain't it

Citabria · « **Reply #6 on:** November 14, 2004, 08:48:33 AM »

lost everything on my hard drive.

had to format and reinstall

save · « **Reply #7 on:** November 14, 2004, 10:42:34 AM »

check what the orginator smtpaddress was and take it from there

Grendel · « **Reply #8 on:** November 14, 2004, 10:49:14 AM »

Email viruses take random sender addresses and information, and forge themselves so they look like coming from one source - like in this case from Hitech - but in reality they're practically 100% coming from some completely different source.

Don't open email attachments.

Jackal1 · « **Reply #9 on:** November 14, 2004, 11:04:03 AM »

Quote

Originally posted by Shane
hey.

i don't take an allegation, no matter how tongue in cheek, of something of this nature lightly.

i strongly suggest you edit or delete your post.

Irony in it`s finest hour.

Krusty · « **Reply #10 on:** November 14, 2004, 09:39:36 PM »

Also if it just says "your login is: and your password is:"

Maybe it's not a virus at all, but somebody screwing around with the "I forgot me password" option and inputting other peoples' names.

Skuzzy · « **Reply #11 on:** November 15, 2004, 07:02:38 AM »

Quote

Originally posted by Citabria
found that #@!#!~!~# bastard worm bagel 2 #@!#@! little punk hacker

htc check your email or scan it or somthing to see if your stuff is sending out that trojan out from your system because the email came from support@hitechcreations.com.

Check the email header Cit. It did not come from us. It is a forged email header and probably came from someone who has a virus and has the support address in thier address book.

Just FYI: The "From" line you see in your email programs does not actually have to reflect where it came from. These are easily forged. Spammers have been doing this for years.
It is the envelope, much like the return address on a letter in regular mail. It too, does not have to reflect where it actually came from.

You have to open the actual email header to see where it came from. Of course, you have to be able to read those headers too. Not exactly friendly stuff.

streetstang · « **Reply #12 on:** November 15, 2004, 07:04:02 AM »

Quote

Originally posted by Jackal1
Irony in it`s finest hour.

buahahah:lol

Manedew · « **Reply #13 on:** November 15, 2004, 10:50:58 AM »

what skuzzy said......

It's easy enough to send an email from 'whitehouse.gov' or whatever ...

hostname - send some mail

header will have the real info ... might want to look at it ... but still can be spoofed ... easy to send fake things when you don't want an answer....

Dux · « **Reply #14 on:** November 15, 2004, 11:59:58 AM »

I've learned the hard way. As part of the Terrain Team, I get lots of e-mails w/ attachments from members of this community... but if I don't see anything really specific for me in the Subject line, I delete it. I don't care who it's from.

I got 4 of those e-mails last night, Cit... 2 of them supposedly from myself. Sorry you opened one.