Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows Me / System Tools / November 2004

Tip: Looking for answers? Try searching our database.

Look what is it?....another dl'd!!! SPAM!

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
heirloom - 07 Nov 2004 15:39 GMT
There it is again, rrrrrrrrrr.   I clicked on "Look What is it?", 11/7/04,
12:13AM (my machine) and another (^^%_) download.   Not sure if I caught
that one in time, either!

Once again, I did not have time to see what was being dl'd before I hit the
cancel button......just hope it didn't finish.   Off to run Spybot and AV.
                                           H
Heather - 07 Nov 2004 20:04 GMT
Where on earth are you seeing these??  They are not showing up on my
computer.  Using the German news reader and they must be filtering them out.

Figgs

> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?", 11/7/04,
> 12:13AM (my machine) and another (^^%_) download.   Not sure if I caught
[quoted text clipped - 3 lines]
> cancel button......just hope it didn't finish.   Off to run Spybot and AV.
>                                             H
Heather - 07 Nov 2004 20:10 GMT
OOPS!!  Having a blonde moment!!  Using the MS news groups, not the Deutsch
one for these MS ng's.......grin.  I will try it with my ISP's news groups
and see if they have let them thru.

Yes, it is on the Rogers news groups...but I am not clicking on it.  Tried
to get the headers, but with the preview pane off, I couldn't.

Figgs

> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?", 11/7/04,
> 12:13AM (my machine) and another (^^%_) download.   Not sure if I caught
[quoted text clipped - 3 lines]
> cancel button......just hope it didn't finish.   Off to run Spybot and AV.
>                                             H
looneytunes>verizone.net - 07 Nov 2004 20:45 GMT
> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?", 11/7/04,
> 12:13AM (my machine) and another (^^%_) download.   Not sure if I caught
> that one in time, either!
>
> Once again, I did not have time to see what was being dl'd before I hit the
> cancel button......just hope it didn't finish.   Off to run Spybot and AV.

Heirloom:

Here's what I got looking at the page source. Don't know if it helps. I
haven't let the post open in my mail client (Mozilla) as yet. Maybe I'll
take a peak.

sced13ri
>                                             H

From: "Jilom" <?>
Subject: Look! What is it?
Date: Sun, 7 Nov 2004 14:13:46 +0800
Lines: 66
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="----=_NextPart_000_01B2_01C4C4D3.FEE23E40"
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Message-ID: <etDrJCJxEHA.1452@TK2MSFTNGP11.phx.gbl>
Newsgroups:
microsoft.public.news.server,microsoft.public.windowsme.display,microsoft.public.windowsme.software,microsoft.public.windowsme.systemtools,microsoft.public.windowsmedia,microsoft.public.windowsmedia.player,microsoft.public.windowsnt.terminalserver.s
NNTP-Posting-Host: 219.137.200.51
Path: TK2MSFTNGP08.phx.gbl!TK2MSFTNGP11.phx.gbl
Xref: TK2MSFTNGP08.phx.gbl microsoft.public.windowsme.display:18542
microsoft.public.windowsme.software:54158
microsoft.public.windowsme.systemtools:59074
microsoft.public.windowsmedia:30509
microsoft.public.windowsmedia.player:169050
microsoft.public.news.server:4065

This is a multi-part message in MIME format.

------=_NextPart_000_01B2_01C4C4D3.FEE23E40
Content-Type: text/plain;
    charset="GB18030"
Content-Transfer-Encoding: quoted-printable

Look!  You can get at least $600 a day!
Now, I got $60000 from this site.
Welcome to join in, they will give you a warm welcome (Money)!
You will receive $6000 a week!
http://www.30dollarsmail.com/pages/index.php?refid=3Dtomakes

And This:
http://boffopaidmail.com/pages/index.php?refid=3Durhbm
You can get at least $1000 a day, receive $15000 in 2 weeks!
I got $15000 in 15 days!
If you join in, they will pay you $500 first!

Which do you choose?
------=_NextPart_000_01B2_01C4C4D3.FEE23E40
Content-Type: text/html;
    charset="GB18030"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3DGB18030">
<META content=3D"MSHTML 6.00.2900.2523" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3D"Microsoft Sans Serif">Look!&nbsp; You can get at =
least $600 a=20
day!</FONT></DIV>

<DIV><FONT face=3D"Microsoft Sans Serif">Now, I got $60000 from this=20
site.</FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">Welcome to join in, they will =
give you a=20
warm welcome (Money)!</FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">You&nbsp;will receive $6000 a=20
week!</FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif"><A=20
href=3D"http://www.30dollarsmail.com/pages/index.php?refid=3Dtomakes">htt=
p://www.30dollarsmail.com/pages/index.php?refid=3Dtomakes</A></FONT></DIV=

<DIV><FONT face=3D"Microsoft Sans Serif"></FONT>&nbsp;</DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">And This:</FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif"><A=20
href=3D"http://boffopaidmail.com/pages/index.php?refid=3Durhbm">http://bo=
ffopaidmail.com/pages/index.php?refid=3Durhbm</A></FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">You can get at least $1000 a =
day, receive=20
$15000 in 2 weeks!</FONT></DIV>

<DIV><FONT face=3D"Microsoft Sans Serif">I got $15000 in 15 =
days!</FONT></DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">If you join in, they will pay =
you $500=20
first!</FONT></DIV>
<DIV>&nbsp;</DIV>
<DIV><FONT face=3D"Microsoft Sans Serif">Which do you=20
choose?</FONT></DIV></BODY></HTML>

------=_NextPart_000_01B2_01C4C4D3.FEE23E40--
looneytunes>verizone.net - 07 Nov 2004 20:53 GMT
>> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?",
>> 11/7/04,
[quoted text clipped - 13 lines]
>
> sced13ri

<Snipped>

Back again, I opened the post with no problem and no evidence of an
attempt to download anything. I'll run AVG just to check but, all I see
is another spam job.

sced13ri
heirloom - 07 Nov 2004 23:06 GMT
Yeah, I looked at the Properties, but, have yet to see what is trying to
dl'd when I first opened the post.    Probably nothing to worry about......I
ran the Spybot, AV, BHO, etc. routine and nothing showed up.
                                   H

> >> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?",
> >> 11/7/04,
[quoted text clipped - 21 lines]
>
> sced13ri
Heather - 07 Nov 2004 23:20 GMT
Odd......I now remember opening that one because of the huge sums of money I
was supposed to get......yeah, sure.  It didn't try to download anything on
my computer, Loon.  Odd that it did on yours.....maybe you should spring for
a new one, lol!!

Figgs

> >> There it is again, rrrrrrrrrr.   I clicked on "Look What is it?",
> >> 11/7/04,
[quoted text clipped - 21 lines]
>
> sced13ri
heirloom - 08 Nov 2004 02:06 GMT
Ahh, this one works just fine for me.....besides, think of all the chrome I
could buy with what a new computer would cost me.
                                   H

> Odd......I now remember opening that one because of the huge sums of money I
> was supposed to get......yeah, sure.  It didn't try to download anything on
[quoted text clipped - 29 lines]
> >
> > sced13ri
Joan Archer - 08 Nov 2004 09:50 GMT
Haven't you got enough chrome on that machine yet ?
I want to know what's happened to your tag lines, I miss them, not the
same with just H.
As they say "Come back Heirloom all is forgiven" <g>
Joan

> Ahh, this one works just fine for me.....besides, think of all the
> chrome I could buy with what a new computer would cost me.
>                                    H
heirloom - 08 Nov 2004 16:29 GMT
Let's just say that "you can never have enough chrome."  And re: the tag
lines, there just seemed to be too much duplication.....besides, I've have
been stalking this NG long enough that everyone knows me.....I offer up a
few answers and take advantage of the resident gurus quite often.   The Me
NG's are the best, I think, just because of the wonderful folks that
frequent them.
                                           H

> Haven't you got enough chrome on that machine yet ?
>  I want to know what's happened to your tag lines, I miss them, not the
[quoted text clipped - 5 lines]
> > chrome I could buy with what a new computer would cost me.
> >                                    H
Heather - 08 Nov 2004 21:57 GMT
Hey Loon......

I miss your taglines......and you are the copyrighted owner of "old
and....."

Please start putting them in again......we all miss them.  Or I shall be
forced to come down there and smack you upside your head!!

Figgs.....not quite as old, but feisty!!

> Let's just say that "you can never have enough chrome."  And re: the tag
> lines, there just seemed to be too much duplication.....besides, I've have
[quoted text clipped - 13 lines]
> > > chrome I could buy with what a new computer would cost me.
> > >                                    H
A/CN-CH_EN - 08 Nov 2004 11:24 GMT
The post "A site for?" and post "Look what is it?" are both using Chinese Encode: GB18030.
If your system haven't this encode, IE will download and install it.
 There it is again, rrrrrrrrrr.   I clicked on "Look What is it?", 11/7/04,
 12:13AM (my machine) and another (^^%_) download.   Not sure if I caught
 that one in time, either!

 Once again, I did not have time to see what was being dl'd before I hit the
 cancel button......just hope it didn't finish.   Off to run Spybot and AV.
                                             H
Mike M - 08 Nov 2004 12:37 GMT
> The post "A site for?" and post "Look what is it?" are both using
> Chinese Encode: GB18030.
> If your system haven't this encode, IE will download and install it.

Which probably explains what heirloom is seeing.

H: You should be able to stop this from happening by going into IE's Tools
| Internet Options | Advanced and unchecking the box "Enable Install on
Demand (IE)."
Signature

Mike Maltby MS-MVP
mcmaltby@hotmail.com

heirloom - 08 Nov 2004 16:16 GMT
Thank you, Gentlemen.....that explains everything and I did, indeed, have
that feature checked in the Advanced settings (but no longer).   I knew I
could count on the resident gurus to put me back on the right path!!
                                       H

> > The post "A site for?" and post "Look what is it?" are both using
> > Chinese Encode: GB18030.
[quoted text clipped - 5 lines]
> | Internet Options | Advanced and unchecking the box "Enable Install on
> Demand (IE)."
Heather - 08 Nov 2004 19:44 GMT
Thanks, Mike.  I had that one checked too.  But the "Install on Demand -
Other" was unchecked.  What is the difference?  And I also recall the
Chinese encode or some such, trying to download in the news groups and I
changed something in OE, I believe......but it was a long time ago.

Cheers.....Heather

> > The post "A site for?" and post "Look what is it?" are both using
> > Chinese Encode: GB18030.
[quoted text clipped - 5 lines]
> | Internet Options | Advanced and unchecking the box "Enable Install on
> Demand (IE)."
Mike M - 08 Nov 2004 19:56 GMT
Heather you might be thinking of (in Outlook Express):
Tools | Options | Read | International Settings where there is a box you
can check to (try and) use your default coding when reading messages.

To be honest I haven't seen any messages prompting me to change fonts or
download language packs for IE for a long long time whereas some years ago
I used frequently to see such messages.  I suspect that that was back in
the days of IE5 and 98SE.
Signature

Mike Maltby MS-MVP
mcmaltby@hotmail.com

> Thanks, Mike.  I had that one checked too.  But the "Install on
> Demand - Other" was unchecked.  What is the difference?  And I also
[quoted text clipped - 3 lines]
>
> Cheers.....Heather
Noel Paton - 08 Nov 2004 21:16 GMT
One other possibility - disable viewing of emails in HTML!!

Signature

Noel Paton (MS-MVP 2002-2005, Windows)

Nil Carborundum Illegitemi
http://www.btinternet.com/~winnoel/millsrpch.htm
http://tinyurl.com/6oztj

Please read http://dts-l.org/goodpost.htm on how to post messages to NG's

> Heather you might be thinking of (in Outlook Express):
> Tools | Options | Read | International Settings where there is a box you
[quoted text clipped - 12 lines]
>>
>> Cheers.....Heather
Heather - 08 Nov 2004 21:47 GMT
Right, Mike.  I think (memory is bad in my old age, grin) that when I
downloaded IE/OE 6, I got that and asked Jim or Steve on the MS OE group.
But it could have been way back in the Win95 days too.

I haven't checked off that box in OE re International Settings.  I had
checked that before I posted the last time and wondered if it should be
checked.

Gathering up some naive newbie questions to ask you guys.......all *basics
that I never learned*....grin.  Bet you can hardly wait, lol.  But I have no
one else to ask.  Mostly folders in Windows Explorer that I am not sure
whether they are needed.

XX  Heather

> Heather you might be thinking of (in Outlook Express):
> Tools | Options | Read | International Settings where there is a box you
[quoted text clipped - 12 lines]
> >
> > Cheers.....Heather
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.