| Scam or No Scam [message #779124] |
Wed, 12 July 2006 19:23 |
|
Hi All
Wonder if anyone here has come across this before (email text content
below), it came with an attached .exe that I haven't opened.
Thanks in advance, David
------------------------------------------------------------ --------------
Hello
My name is Dave and I am from the Support of WorldPay.
We have received the payment order (ID 0220712,Receipt Date 09/07/2006)
from you and we need to
make a verification of the details you have filled in, as we have received a
notice from your card
service stating that there was a chargeback made by the owner of the card
with which you have made
the payment and that your level of authorization has been altered during
your last transaction.
This is a very serious matter. We have deducted the amount of the
chargeback, GBP 149.89, from
your account and added our standard fee of GBP 24.00 as well (you can see
your payment details in
the attachment).
We have failed to contact you using the telephone number you have provided
earlier, meeting no
response.
As a precaution, we have limited access to your account in order to protect
against future
unauthorized transactions.Please understand that this is a security measure
intended to help
protect you and your personal information.
Please contact your credit card company to resolve this matter.
Best Regards,
Dave Gollick
------------------------------------------------------------ -------------
|
|
|
| Re: Scam or No Scam [message #779125 ] |
Wed, 12 July 2006 19:27 |
|
On Wed, 12 Jul 2006 18:23:38 +0100, "David Thomas"
<mail [at] davidcthomas.remove.demon.co.uk> wrote:
>Hi All
>
>Wonder if anyone here has come across this before (email text content
>below), it came with an attached .exe that I haven't opened.
Yeah, I got that too. On mine there was an attached zip file, which
contained an exe (this may have been what you meant). Anyway, I just
deleted it - while it initially got my attention, once I found that
the attachment was an exe it was fairly obviously a scam.
--
Champ
ZX10R
GPz750turbo
|
|
|
| Re: Scam or No Scam [message #779126 ] |
Wed, 12 July 2006 19:29 |
|
"David Thomas" <mail [at] davidcthomas.remove.demon.co.uk> wrote in message
news:e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk...
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
> Hello
> My name is Dave and I am from the Support of WorldPay.
>
> We have received the payment order (ID 0220712,Receipt Date 09/07/2006)
> from you and we need to
> make a verification of the details you have filled in, as we have received
> a
> notice from your card
> service stating that there was a chargeback made by the owner of the card
> with which you have made
> the payment and that your level of authorization has been altered during
> your last transaction.
>
> This is a very serious matter. We have deducted the amount of the
> chargeback, GBP 149.89, from
> your account and added our standard fee of GBP 24.00 as well (you can see
> your payment details in
> the attachment).
>
> We have failed to contact you using the telephone number you have provided
> earlier, meeting no
> response.
>
> As a precaution, we have limited access to your account in order to
> protect
> against future
> unauthorized transactions.Please understand that this is a security
> measure
> intended to help
> protect you and your personal information.
>
> Please contact your credit card company to resolve this matter.
>
> Best Regards,
> Dave Gollick
> ------------------------------------------------------------ -------------
>
>
Scam. Note that it has an attachment which is a zip file containing a .exe
file.
Whatever you do, don't run the .exe file!
|
|
|
| Re: Scam or No Scam [message #779129 ] |
Wed, 12 July 2006 19:36 |
|
On Wed, 12 Jul 2006 18:23:38 +0100, David Thomas wrote:
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
> Hello
> My name is Dave and I am from the Support of WorldPay.
....
I get loads of them. It doesn't seem to be a phishing scam as there's no
dodgy link to click so I assume it's a virus. I just delete them.
Of course it might infect your PC and make it start sending phishing scams:)
Regards, Ian
|
|
|
| Re: Scam or No Scam [message #779132 ] |
Wed, 12 July 2006 19:36 |
|
David Thomas wrote:
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
> Hello
> My name is Dave and I am from the Support of WorldPay.
>
> We have received the payment order (ID 0220712,Receipt Date 09/07/2006)
> from you and we need to
> make a verification of the details you have filled in, as we have received a
> notice from your card
> service stating that there was a chargeback made by the owner of the card
> with which you have made
> the payment and that your level of authorization has been altered during
> your last transaction.
>
> This is a very serious matter. We have deducted the amount of the
> chargeback, GBP 149.89, from
> your account and added our standard fee of GBP 24.00 as well (you can see
> your payment details in
> the attachment).
>
> We have failed to contact you using the telephone number you have provided
> earlier, meeting no
> response.
>
> As a precaution, we have limited access to your account in order to protect
> against future
> unauthorized transactions.Please understand that this is a security measure
> intended to help
> protect you and your personal information.
>
> Please contact your credit card company to resolve this matter.
>
> Best Regards,
> Dave Gollick
Yes, I got that too - despite not even having a WorldPay account. My
system subsequently automagically rejected about 25 similar messages
also reputably from this lot.
I would say delete/reject, it's a scam.
|
|
|
| Re: Scam or No Scam [message #779133 ] |
Wed, 12 July 2006 19:35 |
|
"David Thomas" <mail [at] davidcthomas.remove.demon.co.uk> wrote in message
news:e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk...
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
I do apologise, I should have mentioned that the reason I ask on this
particular group is that a few subscribers on here used to be pretty good at
sussing out which of these things were scams and which were genuine.
Thanks again, David
|
|
|
| Re: Scam or No Scam [message #779135 ] |
Wed, 12 July 2006 19:33 |
|
David Thomas wrote
>Hi All
>
>Wonder if anyone here has come across this before (email text content
>below), it came with an attached .exe that I haven't opened.
Spam innit, report it to Spamcop and move on.
--
steve auvache
one step closer to The Perfect Date.
|
|
|
| Re: Scam or No Scam [message #779139 ] |
Wed, 12 July 2006 19:45 |
|
David Thomas wrote:
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
Yes, it's a scam.
It's *always* a scam
I *know* it's a scam cos I got one
1) Sent to my scam address
2) I don't even *have* a worldpay account.
HTH
--
Catman MIB#14 SKoGA#6 TEAR#4 BOTAFOF#38 Apostle#21 COSOC#3
Tyger, Tyger Burning Bright (Remove rust to reply)
Alfa 116 Giulietta 3.0l (Really) Sprint 1.7 75 TS 156 TS S2
Triumph Speed Triple: Black with extra black bits
www.cuore-sportivo.co.uk
|
|
|
| Re: Scam or No Scam [message #779140 ] |
Wed, 12 July 2006 19:49 |
|
"David Thomas" <mail [at] davidcthomas.remove.demon.co.uk> wrote in message
news:e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk...
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
I've deleted it and I didn't open the exe in the zip file.
Thanks very much all, David
|
|
|
| Re: Scam or No Scam [message #779148 ] |
Wed, 12 July 2006 20:01 |
|
catman <catman [at] cuorerust-sportivo.co.uk> wrote in news:Nyatg.195356
$wA1.122832 [at] fe03.news.easynews.com:
> 2) I don't even *have* a worldpay account.
>
I don't have a Worldpay account but use their services quite often. Every
time I pay my Halifax credit card bill and with some other retailers too.
It's a 3rd party credit card processing service from RBS.
However, if there was a problem with a transaction I would expect the
retailer not Worldpay to contact me.
--
wessie at tesco dot net
BMW R1150GS
|
|
|
| Re: Scam or No Scam [message #779152 ] |
Wed, 12 July 2006 20:05 |
|
steve auvache wrote
>David Thomas wrote
>>Hi All
>>
>>Wonder if anyone here has come across this before (email text content
>>below), it came with an attached .exe that I haven't opened.
>
>Spam innit, report it to Spamcop and move on.
and bugger me if I haven't just this minute got twenty-nine of them.
Each and every one dutifully reported.
--
steve auvache
one step closer to The Perfect Date.
|
|
|
| Re: Scam or No Scam [message #779197 ] |
Wed, 12 July 2006 21:30 |
|
On Wed, 12 Jul 2006 18:23:38 +0100, "David Thomas"
<mail [at] davidcthomas.remove.demon.co.uk> wrote:
>Hi All
>
>Wonder if anyone here has come across this before (email text content
>below), it came with an attached .exe that I haven't opened.
I'm another one that got it. My virus scanner (NOD32) picked it up
before it had finished downloading and deleted a trojan.
Time Module Object Name Threat Action User Information
12/07/2006 16:55:04 IMON email message from: "Dave Gollick"
<merchant [at] uk.worldpay.com> to: xxxxxxxxxxxxxxxx [at] thunderin.co.uk with
subject [ORDER ID 0220712] WorldPay Chargeback dated Wed, 12 Jul 2006
15:27:06 -0100 Win32/TrojanDownloader.Small.NIH trojan contained
infected files
HTH.
--
Posted via NewsDemon.com - Premium Uncensored Newsgroup Service
------->>>>>>http://www.NewsDem
|
|
|
| Re: Scam or No Scam [message #779219 ] |
Wed, 12 July 2006 22:20 |
|
In message <e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk>, David Thomas
<mail [at] davidcthomas.remove.demon.co.uk> writes
>Hi All
>
>Wonder if anyone here has come across this before (email text content
>below), it came with an attached .exe that I haven't opened.
>
>Thanks in advance, David
> ------------------------------------------------------------ --------------
>Hello
> My name is Dave and I am from the Support of WorldPay.
>
What do you think ?
Yeah - got it today
--
geoff
|
|
|
| Re: Scam or No Scam [message #779233 ] |
Wed, 12 July 2006 23:03 |
|
On Wed, 12 Jul 2006 18:35:03 +0100,
David Thomas <mail [at] davidcthomas.remove.demon.co.uk>
wrote in <e93bsd$o8h$1$8300dec7 [at] news.demon.co.uk>:
> "David Thomas" <mail [at] davidcthomas.remove.demon.co.uk> wrote in message
> news:e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk...
>> Hi All
>> Wonder if anyone here has come across this before (email text content
>> below), it came with an attached .exe that I haven't opened.
>> Thanks in advance, David
>> ------------------------------------------------------------ --------------
> I do apologise, I should have mentioned that the reason I ask on this
> particular group is that a few subscribers on here used to be pretty good at
> sussing out which of these things were scams and which were genuine.
Well, just apply Okham's razor, or a bit of common sense:
a) Do I have an account with this crew? (cuts about 99.9% of my mail)
b) Have I made a payment about this amount with them?
i) Yes; then check with them via other channels.
ii) No; either ignore it, or check with them via other channels.
c) Always reconcile every entry on your bank and CC statements with
something you authorised (sometimes difficult because the charging
company may be an affiliate with a very different name -- e-mail
confirmations of on-line orders help here).
--
Ivan Reid, Electronic & Computer Engineering, ___ CMS Collaboration,
Brunel University. Ivan.Reid [at] [brunel.ac.uk|cern.ch] Room 40-1-B12, CERN
GSX600F, RG250WD "You Porsche. Me pass!" DoD #484 JKLO#003, 005
WP7# 3000 LC Unit #2368 (tinlc) UKMC#00009 BOTAFOT#16 UKRMMA#7 (Hon)
KotPT -- "for stupidity above and beyond the call of duty".
|
|
|
| Re: Scam or No Scam [message #779257 ] |
Wed, 12 July 2006 23:43 |
|
|
Post removed (X-No-Archive: yes)
|
|
|
| Re: [OT] Scam or No Scam [message #779264 ] |
Wed, 12 July 2006 23:54 |
|
David Thomas wrote:
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
> Hello
> My name is Dave and I am from the Support of WorldPay.
>
Very much a scam with an attached trojan. The mailserver I run at work
got *hundreds* of these. If you run the exe (i did on an isolated
machine) it starts a downloader that downloads a password grabber to
your PC.
|
|
|
| Re: Scam or No Scam [message #779284 ] |
Thu, 13 July 2006 00:53 |
|
"David Thomas" <mail [at] davidcthomas.remove.demon.co.uk> wrote in message
news:e93b6q$cqp$1$8302bc10 [at] news.demon.co.uk...
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
> Thanks in advance, David
> ------------------------------------------------------------ --------------
> Hello
> My name is Dave and I am from the Support of WorldPay.
>
Got it yesterday - Avast picked up a virus - deleted without looking at the
message or exe.
|
|
|
| Re: Scam or No Scam [message #780003 ] |
Fri, 14 July 2006 14:58 |
|
David Thomas wrote:
> Hi All
>
> Wonder if anyone here has come across this before (email text content
> below), it came with an attached .exe that I haven't opened.
>
We are getting dozens of them at work at the mo.
Subject = [ORDER ID 0220712] WorldPay Chargeback Scanning time = 14/07/2006
11:38:12 Engine/Pattern = 8.000-1001/3.567.00
Action on virus found:
The attachment ID 0220712.zip contains TROJ_DLOADER.DEU virus. ScanMail has
Deleted it.
--
Alex
Piece by piece the penguins have taken my sanity
www.drzoidberg.co.uk www.ebayfaq.co.uk
|
|
|
