ok

i'm not a member of paidexplosion and since my incident with Kiwi

i keep getting these empty spam letters. i dont appreciate it PaidExplosion. Please stop immediately or I'll report your site to your hosting company and your email program will be off the air.



From :
rjw7 <rjw7@ao.o>

To :
ILostMyTrueLove@hotmail.com

Subject :
Arial, Helvetica, sans

Date :
Sat, 21 Dec 2002 10:11:32 -0500

MIME-Version: 1.0
Received: from web1516.dn.net ([216.167.77.40]) by mc4-f15.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sat, 21 Dec 2002 07:04:57 -0800
Received: from Dlvgh [68.117.39.141] by web1516.dn.net (SMTPD32-6.06) id A499A85B00BE; Sat, 21 Dec 2002 10:11:21 -0500
Message-Id: <200212211011953.SM00399@Dlvgh>
Return-Path: rewards@PaidExplosion.com
X-OriginalArrivalTime: 21 Dec 2002 15:04:57.0307 (UTC) FILETIME=[53578AB0:01C2A902]
View E-mail Message Source
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version

Content-Type: multipart/alternative; boundary=R571y740A36QXSATQdHX526RI124


Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

and heres another one just received.

i've been deleting them and wasnt going to post.

but i just posted in Poncer's complaint folder and notified everyone that Kiwi was here last night

and since then more have come.

so here is another one received since posting a few minutes ago in Poncer's folder.

i'm not making accusations but its wierd and too coincidental for me.

From :
yu_urn_annsppealdjh <yu_urn_annsppealdjh@hre.e>

To :
ILostMyTrueLove@hotmail.com

Subject :
A special funny website

Date :
Sat, 21 Dec 2002 10:07:46 -0500

MIME-Version: 1.0
Received: from web1516.dn.net ([216.167.77.40]) by mc9-f34.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sat, 21 Dec 2002 07:01:11 -0800
Received: from Lbq [68.117.39.141] by web1516.dn.net (SMTPD32-6.06) id A3B9CC690142; Sat, 21 Dec 2002 10:07:37 -0500
Message-Id: <200212211007828.SM00399@Lbq>
Return-Path: rewards@PaidExplosion.com
X-OriginalArrivalTime: 21 Dec 2002 15:01:11.0174 (UTC) FILETIME=[CC8E6260:01C2A901]
View E-mail Message Source
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version

Content-Type: multipart/alternative; boundary=PiK9rNb13736O3Y31x7mZxg


Content-Type: text/html
Content-Transfer-Encoding: quoted-printable


This is a funny website
I hope you would enjoy it.


the return path is rewards@paidexplosion.com
I hope and pray you are not behind this with Kiwi

and another one.


From :
webmaster <webmaster@free-sign-up.com>

To :
ILostMyTrueLove@hotmail.com

Subject :
CELLPADDING

Date :
Sat, 21 Dec 2002 10:08:48 -0500

MIME-Version: 1.0
Received: from web1516.dn.net ([216.167.77.40]) by mc1-f10.law16.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Sat, 21 Dec 2002 07:02:13 -0800
Received: from Vde [68.117.39.141] by web1516.dn.net (SMTPD32-6.06) id A3F7CC6C0142; Sat, 21 Dec 2002 10:08:39 -0500
Message-Id: <200212211008546.SM00399@Vde>
Return-Path: rewards@PaidExplosion.com
X-OriginalArrivalTime: 21 Dec 2002 15:02:13.0440 (UTC) FILETIME=[F1AB6C00:01C2A901]
View E-mail Message Source
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version

Content-Type: multipart/alternative; boundary=R8V350dckJTc30rAU4fK1JRwL915951


Content-Type: text/html
Content-Transfer-Encoding: quoted-printable

ILMTL ,

Try spamcop.net and write paidexplosion directly .

I get lots of spam that seems to come from different rewards programs -- some with attachments . Some how the spammer or a virus has found a way to make it seem as though they are coming from these progams but actually are not .

I have exchanged emails with both letterweath and mccrawmail over such . Both these wm had no clue and were not at all happy that someone was using their addy to send such .

This may not be the case with the email you received . However , you may discover that paidexplosion had nothing at all to do with these emails .

i thought maybe they were with Kiwi lol and thats the reason for the spam since the other day.

okay.

what do i do for spamcop.net i never did this before.

and i'm assuming i can use the email support@paidexplosion.com?

help please. thanks.

Sorry . Site vanished .

spamcop.net will email a report(s)/complaint(s) to the proper host/mailserver/whateveritis *G* . They dig deeply through the email and the html that might be supplied . You'll have to know how to find the headers in the email . I'm assuming you already have learned that from your recent spam attack . Check it out . It's a good service and you can use it for free .

I would also recommend mailwasher.com (?) , free as well , but I'm not sure if it will work with hotmail .

In looking at those headers .

those are NOT from thea or her program .

But from one of her infected members pc's that has Klez

Yeah and maybe emailing itself to everyone in her addy book eh ?

yep as Thea's come from @tau

in the message Id

==========================

I get about 10 a day that come to me like i sent them to myself

and at least another 50 every day from other sites from their infected members that are my members as well .

I just strip all attachments server side and . I suggest ILMTL get mail washer

From youself eh ?? LOL! That's sorta funny --and not too .

Will mailwasher work with hotmail ?

ok i have no idea what you mean.

i know they arent from kiwi's. but these started after kiwi's emails stopped. i get from 3 to 5 a day

but i'm not a member of that program.

so in other words, this person is doing it on purpose or accidently?

and i'm sorry kiwi for putting the blame on you for this.

i just assumed and i'm sorry for assuming.

so what to do with these emails? i'm assuming you're saying its not being done on purpose?

help please they are annoying

does my computer having a virus now?

If it the Klez virus as Jay mentioned , then it's an accident , as the virus mails everyone in a persons addy book from the pc that has been infected . It's just one of the things this virus does-- like the "gift" that keeps on giving , so to speak

I Lost , I dunno . Did you open any attachements from anyone ? I don't open ANY unless the person tells me they are sending it because these things make you think that a friend meant to send them when they had no clue anything was even being sent .

Do you have a virus scan on your pc ?

thanks lexi and Jay.

so i dont have to do anything but just delete.

i'll accept these annoying emails lol long as my comp doesnt get infected.

Well , I lost , if mailwasher will work , you don't have to except anything . Mailwasher will delete the emails before they are ever downloaded and have a feature to make it look as tho the spammer has an invalid email addy by sending the spammer a message that their email to you bounced . I just have no clue if it will work with the web mail you are using . Maybe Jay is checking into that now .

btw , I'm the anon here now *waves to Ilost and sophie*

mailwasher?

hotmail uses mcafee automatically for emails as they arrive.

so i think i'll turn on the junk mail section in hotmail

That's a good idea I Lost !

Mercy ! I've been a member for nearly 10 months and still haven't made 300 posts . *holds back of palm to forehead and says * Woe is me!

LOL!

Hi Guys,

it's not my fault.
Maybe this can explain you better how this virus works.
I sent this alert to my members some months ago:

"VIRUS ALERT

In these days we're receiving a lot of infected emails.

The most common virus is the W32.KLEZ.GEN@mm.

This worm infects unprotected PC and then auto-sends itself using random
"From:" information taken from the mail box.

So you can receive infected emails from senders who are not really infected.

REMEMBER: WE DON'T SEND ATTACHMENT WITH OUR EMAILS, SO IF YOU RECEIVE AN
ATTACHMENT FROM US DELETE THIS EMAIL, BECAUSE IT IS NOT A MESSAGE SENT BY US
AND YOU CAN BE SURE THAT IT'S THAT VIRUS !!!

Money2Read Webmaster has made a very clear explanation of this so I copy it,
please, read carefully:

>From Money2Read Newsletter:
"Because this worm does use a randomly chosen address that it finds on an
infected computer as the "From:" address, numerous cases have been reported
in which users of uninfected computers receive complaints that they have
sent an infected message to someone else.

For example, Linda Anderson is using a computer that is infected with
W32.Klez.E@mm; Linda is not using a antivirus program or does not have
current virus definitions. When W32.Klez.E@mm performs its emailing routine,
it finds the email address of Harold Logan. It inserts Harold's email
address into the "From:" line of an infected email that it then sends to
Janet Bishop. Janet then contacts Harold and complains that he sent her
infected email, but when Harold scans his computer, the AntiVirus does not
find anything--as would be expected--because his computer is not infected."

Seen that we're receiving 20-30 infected emails daily, some members PC are certainly infected, please, SCAN YOUR SYSTEM WITH THE LATEST ANTI-VIRUS PROGRAM.
If you don't have it, you can scan your PC online for FREE here:
http://housecall.antivirus.com/housecall/s.../start_corp.asp
or here:
http://www.pandasoftware.com/"

i like to talk lol

thanks Thea.

i just downloaded virus protection last month after i had some trojans.

but alas, i dont keep my virus protection running in the background.

i figured since i only read emails and surf, i dont really need it.

i'm scanning now.

I got infected with klez last year and did not know it..My virus definitions were and are still always up to date..yet it missed this one and it slowly began eating dll files until many of my programs aka MSN messenger.Incredimail etc were useless to me..The only way I found it was
a teckkie told me to use this as his job is to scan for viruses and he ends up with them frequently and this cleanses them and It's free

http://housecall.antivirus.com/housecall/s.../start_corp.asp

used housecall today

thanks! no viruses found!

Thea, would never send out spam..

I had the same thing happen at mec-co-op months ago...seems to come from members computers.................

Thea is one of the nicest, most honorable webmasters and would never spam any of her members.

I agree with you Lexie. Same thing happened with me and Jay. But it was our Yahoo accounts. I recieved blank e-mails from him, and he recieved blank e-mails from me. Shelly even recieved these blank e-mails from me as well.

Lexie, it may not be true. Me and Jay, nor is Buckeyeduo, or Shelly were in my address book back then. Jay is now, but nobody else. Why would I send those e-mails to them when they are not in my address book?

Caroline,

You can go to this site and look up who the IP addresses belong to.

http://combat.uxn.com/

I'm not too good at knowing how this works, but it does come in handy. Maybe Jay can explain it.....