Notices
ScoobyNet General General Subaru Discussion

DHL E-mail that's actually a virus attack ?

Old 10 November 2010, 09:01 PM
  #1  
dunx
Scooby Senior
Thread Starter
iTrader: (3)
 
dunx's Avatar
 
Join Date: Jun 2006
Location: Slowly rebuilding the kit of bits into a car...
Posts: 14,333
Likes: 0
Received 0 Likes on 0 Posts
Default DHL E-mail that's actually a virus attack ?

Just received one, luckily Chrome said "NO !".

Is this a new trick or am I behind the times ?

dunx
Old 10 November 2010, 09:02 PM
  #2  
dunx
Scooby Senior
Thread Starter
iTrader: (3)
 
dunx's Avatar
 
Join Date: Jun 2006
Location: Slowly rebuilding the kit of bits into a car...
Posts: 14,333
Likes: 0
Received 0 Likes on 0 Posts
Default

Sorry, we were unable to deliver your message to the following address.

<customerservice.no.5358@dhl.com>:
Remote host said: 550 #5.1.0 Address rejected customerservice.no.5358@dhl.com [RCPT_TO]

--- Below this line is a copy of the message.

Received: from [217.146.183.216] by nm4.bullet.mail.ukl.yahoo.com with NNFMP; 10 Nov 2010 20:58:04 -0000
Received: from [217.146.183.62] by tm9.bullet.mail.ukl.yahoo.com with NNFMP; 10 Nov 2010 20:58:04 -0000
Received: from [127.0.0.1] by omp1031.mail.ukl.yahoo.com with NNFMP; 10 Nov 2010 20:58:04 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 265395.26502.bm@omp1031.mail.ukl.yahoo.com
Received: (qmail 58379 invoked by uid 60001); 10 Nov 2010 20:58:04 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.uk; s=s1024; t=1289422684; bh=eOWAs0VR+1zs05ViZUe+9CojWtSRSIwcg/nSkHJ7QLU=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Referencesate:From:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=0XoV4TILd5pc0EkI1/A/B+4MMw5jE252r/+e3KIrQD0qfOjqHrW0yET1CFFJ6kPVUGBo1c/lXNSLHmVu60t250q/AtqbhBSWIRqw1rW4JY2V0C/1amg20z08W0It0nVNL0jOp1VxFwaYecVyFbPYoGOEfEjviw7Ho rJMjpj7s3k=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.co.uk;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Referencesate:From:Subject:To:In-Reply-To:MIME-Version:Content-Type;
b=5ZpwDp8/wQdR92AhqnSaTUeVxCxkjwgVfuztbHEa0od+eBlbxViSkRtyhY izdF/yP65BSWfc3dxxm0bnrXVdBTCZyBBpS3/DPaF91tfCAEX++vf4WG7auohHv2SjjSGyVX63vetM98/6r4UkfeJIEQEXLHnmlsIar1u8YaPljLM=;
Message-ID: <57365.56526.qm@web27604.mail.ukl.yahoo.com>
X-YMail-OSG: FsdEIKkVM1nRir9MEcKCszuHBs0jh8U8t9ydrb_yVJCfrJw
63aiAazNb2XLjuIDQbDuGau.ho7bg7QM8fr4y5eJDv2bCQHMwa yHFfvCOdmu
kH8E4WOlkBG.NHxPA6I312gWRx2rfOQeOEiv5kUgJuDA0x.ya_ I93Sb3C.9i
G6vljdji4rM3YvdsTPjVx5IGMy3pN1_KDPRPXK5etkb__.AE9k .x.yTlU0vl
ZXTI4lZaF4WyH9LPCchVrwabaAxMi5h66mKfVwLaAJTdRqUuTP l2MTNYufEu
iIuMTPpoBylDvWgDHpI9j6nKowrt9QGZzrvgCrhJoCh2gOw--
Received: from [90.200.31.203] by web27604.mail.ukl.yahoo.com via HTTP; Wed, 10 Nov 2010 20:58:03 GMT
X-Mailer: YahooMailRC/504.5 YahooMailWebService/0.8.107.284920
References: <000f01cb7fdd$79c7595e$3f0fa8c0@user-e0502298ea>
Date: Wed, 10 Nov 2010 20:58:03 +0000 (GMT)
From: duncan campbell <campbed04@yahoo.co.uk>
Subject: Re: DHL service. Get your parcel No171544
To: DHL Global Services <customerservice.no.5358@dhl.com>
In-Reply-To: <000f01cb7fdd$79c7595e$3f0fa8c0@user-e0502298ea>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-490731983-1289422683=:56526"

--0-490731983-1289422683=:56526
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable

Virus attached !=0A=0A=0A=0A________________________________=0AFr om: DHL Gl=
obal Services <customerservice.no.5358@dhl.com>=0ATo:"ME"
o.uk=0ASent: Tue, 9 November, 2010 6:12:31=0ASubject: DHL service. Get your=
parcel No171544=0A=0A Dear Customer!=0A=0AYour package has been returned =
to the DHL office.=0AThe reason of the return is - Incorrect delivery addre=
ss of the package!=0A=0AAttached to the letter mailing label contains the d=
etails of the package =0Adelivery.=0AYou have to print mailing label, and c=
ome in the SDF office in order to receive =0Athe packages.=0A=0AThank you.=
=0ADHL Logistics.=0A=0A=0A=0A=0A=0A=0A=0AIt is not quite accurate to say th=
at in deduction we proceed from the more to =0Athe less general, still less=
to say, as is often said, that we proceed from the =0Auniversal to the par=
ticular.For it may happen that the consequent is of =0Aprecisely the same a=
mount of generality as the antecedent. This is so, not only =0Ain most form=
s of immediate inference, but also in a syllogism which consists of =0Asing=
ular propositions only, e. =0A=0A=0A=0A
--0-490731983-1289422683=:56526
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D"text/css"><!-- DIV {margin:0px;} --></style></he=
ad><body><div style=3D"font-family:'times new roman', 'new york', times, se=
rif;font-size:14pt"><div>Virus attached !</div><div style=3D"font-family:ti=
mes new roman, new york, times, serif;font-size:14pt"><br><div style=3D"fon=
t-family:times new roman, new york, times, serif;font-size:12pt"><font size=
=3D"2" face=3D"Tahoma"><hr size=3D"1"><b><span style=3D"font-weight: bold;"=
>From:</span></b> DHL Global Services &lt;customerservice.no.5358@dhl.com&g=
t;<br><b><span style=3D"font-weight: bold;">To:</span></b> "ME"
hoo.co.uk<br><b><span style=3D"font-weight: bold;">Sent:</span></b> Tue, 9 =
November, 2010 6:12:31<br><b><span style=3D"font-weight: bold;">Subject:</s=
pan></b> DHL service. Get your parcel No171544<br></font><br><meta http-equ=
iv=3D"x-dns-prefetch-control" content=3D"off">=0A=0A =0A =0A<style></style>=
=0A=0A=0ADear Customer!<br>=0A<br>=0AYour package has been returned to the =
DHL office.<br>=0AThe reason of the return is - Incorrect delivery address =
of the package!<br>=0A<br>=0AAttached to the letter mailing label contains =
the details of the package delivery.<br>=0AYou have to print mailing label,=
and come in the SDF office in order to receive the packages.<br>=0A<br>=0A=
Thank you.<br>=0ADHL Logistics.<br>=0A<br>=0A<br>=0A<br>=0A<br>=0A<br>= 0A<b=
r>=0A<p><font color=3D"#FFFFF6">It is not quite accurate to say that in ded=
uction we proceed from the more to the less general, still less to say, as =
is often said, that we proceed from the universal to the particular.For it =
may happen that the consequent is of precisely the same amount of generalit=
y as the antecedent. This is so, not only in most forms of immediate infere=
nce, but also in a syllogism which consists of singular propositions only, =
e. </font></p>=0A=0A=0A<meta http-equiv=3D"x-dns-prefetch-control" content=
=3D"on"></div></div><div style=3D"position:fixed"></div>=0A=0A=0A</div><br>=
=0A=0A=0A=0A </body></html>
--0-490731983-1289422683=:56526--

Last edited by dunx; 10 November 2010 at 09:04 PM.
Old 10 November 2010, 11:07 PM
  #3  
Cannon Fodder
Scooby Regular
iTrader: (100)
 
Cannon Fodder's Avatar
 
Join Date: Oct 2008
Location: Planet Earth
Posts: 13,684
Likes: 0
Received 0 Likes on 0 Posts
Default

I get the same emails from time to time, my anti virus has always picked them up plus my spam filter always picks them before they get to my inbox.

I think some of them have been known to contain spyware/walware, no doubt Nigerians are involved somewhere down the line.
Old 10 November 2010, 11:10 PM
  #4  
jaytc2003
Scooby Regular
iTrader: (1)
 
jaytc2003's Avatar
 
Join Date: Aug 2005
Location: Manchester ish
Posts: 18,547
Likes: 0
Received 0 Likes on 0 Posts
Default

yep also get them from fedex and ups as well
Old 10 November 2010, 11:43 PM
  #5  
jura11
Scooby Regular
iTrader: (7)
 
jura11's Avatar
 
Join Date: Apr 2010
Location: www.slowboy-racing.co.uk
Posts: 10,523
Received 1 Like on 1 Post
Default

Nigerian scammers using same trick and still using only Yahoo...
Old 11 November 2010, 03:38 PM
  #6  
addison
Scooby Regular
 
addison's Avatar
 
Join Date: Dec 2007
Posts: 569
Likes: 0
Received 0 Likes on 0 Posts
Default

just had one from UPS
Old 11 November 2010, 03:59 PM
  #7  
B0DSKI
Scooby Regular
iTrader: (17)
 
B0DSKI's Avatar
 
Join Date: May 2004
Location: Owner of BrCarDetailing
Posts: 10,626
Received 1 Like on 1 Post
Default

Had one this morning from DHL
Old 11 November 2010, 04:56 PM
  #8  
dantastic
Scooby Regular
 
dantastic's Avatar
 
Join Date: May 2007
Location: Surreyscoobies
Posts: 493
Likes: 0
Received 0 Likes on 0 Posts
Default

Yep i get them all the time saying Fedex was unable to deliver your item today blah blah blah, i dont click the link in these emails i just delete them.
Old 11 November 2010, 05:33 PM
  #9  
dunx
Scooby Senior
Thread Starter
iTrader: (3)
 
dunx's Avatar
 
Join Date: Jun 2006
Location: Slowly rebuilding the kit of bits into a car...
Posts: 14,333
Likes: 0
Received 0 Likes on 0 Posts
Default

Phew ! I am expecting Snail Mail, but they seem to have lost my parcel...

Thanks fellas !

dunx
Old 11 November 2010, 05:37 PM
  #10  
dazdavies
Scooby Regular
iTrader: (22)
 
dazdavies's Avatar
 
Join Date: Oct 2000
Location: N/A
Posts: 7,061
Received 82 Likes on 46 Posts
Default

I keep getting DHL ones. The attachment is an .exe file. I'm not dumb enough to run it and just dlete them as thy come in, I've had about 4 now.
Old 11 November 2010, 06:14 PM
  #11  
Dave Y
Scooby Regular
Support Scoobynet!
iTrader: (52)
 
Dave Y's Avatar
 
Join Date: Nov 2008
Location: Forest of Dean
Posts: 5,167
Received 133 Likes on 97 Posts
Default

just deleted a Fedex one.Norton anti-virus picked up on it.
Old 11 November 2010, 08:02 PM
  #12  
Terminator X
Owner of SNet
iTrader: (7)
 
Terminator X's Avatar
 
Join Date: Oct 2003
Location: Berkshire
Posts: 11,513
Likes: 0
Received 0 Likes on 0 Posts
Default

You deserve a virus if you're dumb enough to open random emails with attachements (sp?) ...

TX.
Old 13 November 2010, 02:17 PM
  #13  
dunx
Scooby Senior
Thread Starter
iTrader: (3)
 
dunx's Avatar
 
Join Date: Jun 2006
Location: Slowly rebuilding the kit of bits into a car...
Posts: 14,333
Likes: 0
Received 0 Likes on 0 Posts
Default

Fine but I'm expecting a parcel, that has gone missing...

Easy to get caught out in the rush.

dunx
Old 13 November 2010, 04:18 PM
  #14  
jura11
Scooby Regular
iTrader: (7)
 
jura11's Avatar
 
Join Date: Apr 2010
Location: www.slowboy-racing.co.uk
Posts: 10,523
Received 1 Like on 1 Post
Default

Originally Posted by dunx
Fine but I'm expecting a parcel, that has gone missing...

Easy to get caught out in the rush.

dunx
Hi dunx why you don't use the DHL tracker http://www.dhl.co.uk/en/express/trac...reference.html
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
LSherratt
Non Scooby Related
104
27 September 2015 03:25 PM
yabbadoo4
General Technical
10
24 September 2015 11:10 PM
jayallen
Was it you?
4
19 September 2015 07:42 PM
MeisterR
Car Parts For Sale
1
15 September 2015 07:07 PM


Thread Tools
Search this Thread
Quick Reply: DHL E-mail that's actually a virus attack ?



All times are GMT +1. The time now is 01:38 AM.