Spam from Golden Hill - virus infections
Posted July 22nd, 2005 by mikemee
Extremely Important Notice - Please Read!
We've received a report from one of our internet providers that infected computer(s) in our network have been generating spam and they will disable all internet access for everyone unless we fix it. So, if you have a machine running Microsoft Windows,
- please visit this Symantec Virus Cleanup site and follow the instructions.
- If you find this virus on your machine, please notify us by email so we know the problem has been taken care of.
- If your machine was infected, please take the extra step of installing one of the free excellent anti-virus programs available such as Avast. (For more steps you can take, please see also our page on removing spyware).
We've chosen to allow everyone to easily send email from the network by leaving port 25 (SMTP) open. If spamming viruses continue to happen, we'll need to block sending email or risk having all internet access disabled. In our view, this is a reasonable request by Speakeasy and we encourge you to fix this asap so we don't need to take further steps.
Thanks in advance for your prompt attention to this.
FYI, here is the full text of the Speakeasy notice:
******************************************************* * PLEASE THOROUGHLY REVIEW THIS NOTICE. * * * * We have received a report regarding your computer * * or network's security. It's imperative that you * * review this notice and take the recommended actions * * immediately. Should we receive similar reports, we * * may need to interrupt your broadband services until * * you are able to secure your computer or network. * * * * We appreciate your prompt attention to this matter. * ******************************************************* Greetings, We have recently received a report that there has been activity originating from your circuit that is in violation of the Speakeasy Acceptable Use Policy. The IP address in question is: 66.93.33.41 The reports we have received are concerning unsolicited emails. Due to subject and content of the these unsolicited emails, we believe the machine in question to be infected with one of the W32.Mytob@mm worms. These are a mass-mailing worms that open up back doors, attacks and listens on these opened ports, scans and accesses remote Web sites while sending email to any addresses it finds using its own SMTP engine. Symantec has released detailed information and removal instructions at: http://securityresponse.symantec.com/avcenter/venc/data/w32.mytob@mm.removal.tool.html For your reference, please also visit the Speakeasy Security Zone at: https://www.speakeasy.net/security Note: You will need to login to MySpeakeasy in order to view this page. You can also view the latest viruses appearing on the internet at this site: http://www.wugnet.com/virusfeed.asp Note: If you are providing mail forwarding services for others, please either stop the mail forward service or provide your clients anti-virus filtering at your mail server. Taking these steps will prevent viral email being proliferated through your IP and keep your IP from being blacklisted on various RBLs. It is vital for the security of your personal network and the Speakeasy network as a whole that you take these actions. If we continue to receive similar reports about your circuit, we will be forced to temporarily suspend your broadband service until you have had time to remove the infection from your network. Please understand that we consider an interruption in your service only when it is absolutely required to ensure both your security, and the overall security of the entire Speakeasy network. PLEASE ALSO NOTE: If this is your first notification from abuse@speakeasy.net, there will be no Service Ticket created for this incident. If there have been abuse incidents reported on your circuit in the past however, there will be an open Service Ticket on your account. To ensure that your service is not interrupted, it's important that you update us once you have resolved this issue. Please call Speakeasy Support at 800.556.5829 or login to MySpeakeasy (http://www.speakeasy.net/myspeak) and update the open Service Ticket referencing this issue. We thank you for taking the time to address these Internet security concerns, Network Security Department Speakeasy, Inc. abuse@speakeasy.net - Speakeasy AUP/TOS http://www.speakeasy.net/tos
So Cal Free Net.org
Comments
Post new comment