From: abuse@attcanada.ca
Subject: Re: Completely FREE Shopping Cart for your Site! [ABU2000051900000233]
Date: Fri, 26 May 2000 11:22:23 -0400 (EDT)
To: xxxxxxxxxxx@xxxxxxxxx.com

Hi there.

Thanks for your report regarding unsolicited email spam from one of our users. We've investigated this matter, and found it to have originated from a series of fraudulent logins from a legitimate user account on our system. Apparently, this is the result of our users' being infected with either the BackOriface or NetBus Trojan horse programs which gave the intruder access to this person's name and password.

I have instructed our user how to remove the Trojan and the account's password has been changed, so this problem should no longer be occurring from this user's Internet account.

If you receive any further messages of a similar nature originating from an AT&T Canada IP address, please forward the message with full headers to abuse@attcanada.ca and it will be dealt with as soon as possible.


--------------------------------------------
Mark A...
Policy Management Specialist
Internet & E-Business Solutions
AT&T Canada
E-mail - abuse@attcanada.ca
--------------------------------------------




On Fri, 19 May 2000, Netcom Abuse IMC Outbox wrote:

> Date: Fri, 19 May 2000 13:46:13 -0500 (CDT)
> From: Netcom Abuse IMC Outbox <abuseout@attcanada.ca>
> To: abuseguy@attcanada.ca
> Subject: Completely FREE Shopping Cart for your Site! [ABU20000519000002336332]
>
> Sender : xxxxxxxxxxx@xxxxxxxxx.com
> Tracking Number : ABU20000519000002336332
> Pool : abuse@attcanada.ca
> ---
>
> SPAM!!!!!!!!!!!!!!!!!!!!!!!
>
> Return path: <WytV0kyiS@mci.com>
> Received: from localhost (localhost [127.0.0.1]) by xxxxxxxxxx.xxxxxxxxx.com (8.9.3/8.8.7) with ESMTP id MAA04778 for <xxxxxxx@localhost>; Fri, 19 May 2000 12:24:34 -0500
> From: WytV0kyiS@mci.com
> Received: from mail.xxxxxxxxxx.com by localhost with IMAP (fetchmail-5.3.1) for xxxxxxx@localhost (single-drop); Fri, 19 May 2000 12:24:34 -0500 (CDT)
> Received: from mail.jmrdomain.com (mail.jmr.com [207.151.9.21]) by mail.xxxxxxxxxx.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id LCBB9LD4; Fri, 19 May 2000 12:24:16 -0500
> Received: from 91WR223m9 (trt-on57-97.netcom.ca [216.123.101.97]) by mail.jmrdomain.com with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2650.21) id KZMKJ1BC; Fri, 19 May 2000 10:16:40 -0700
> Date: 19 May 00 1:12:29 PM
> Message-ID: <9Tt3oBmBygr>
> Subject: Completely FREE Shopping Cart for your Site!
> Status: RO
>
>
> FREE Fully Enabled E-Commerce WEB-SITE
> So you can jump-start your internet business today!
>
>
> Jump-Start Your Internet Business Today!
> * Free Custom Web-Site for Life
> * No Contracts to Sign
> * Free Electronic Shopping Cart
> * Free Email Accounts
> * Free Internet Access
>
> Studies have shown you can increase your sales up to
> 1500% by accepting Credit Cards on-line!
>
> Accept Visa, Mastercard, Discover/Novus and
> American Express! Also Debit Card, Direct Check,
> and countless more!
>
> Minimal Credit Requirements ~ Prior Bankruptcy OK!
> Internet Business ~ New Startups ~ Home Office
> Mail/Phone Order ~ Retail Stores
> 99% approval! ~ No set-up fees! ~ Low monthly fees
>
> Transactions credited directly to your bank electronically
> Customer service 24/7!
>
>
> REPLY NOW!, & Learn How to Receive this Free Custom Web-Site, with Electronic
> Shopping Cart.
>
> STARTING A BUSINESS ONLINE OF ANY KIND?
> So what are you waiting for?
>
> If you REPLY within 24 hours
> We'll include a Free Internet Marketing Package that includes:
> Free Search Engine Submissions to over 400 of the top Internet Directories
> & a Link to eBay the internet's premiere auctioneer!
>
>
> THERE IS NO OBLIGATION IN RESPONDING TO THIS EMAIL
> EXCEPT TO RECEIVE MORE INFORMATION.
>
> @@@ IMPORTANT! @@@
> US ONLY, AND MAKE SURE TO INCLUDE ALL OF THE DETAILS BELOW!
> @@@ IMPORTANT! @@@
>
> To REGISTER click HERE:
> mailto:ecom4765@myworldmail.com?subject=more_info
>
> -NAME
> -PHONE #
> -FAX #
> -EMAIL ADDRESS
> -WEBSITE ADDRESS (If you have one already!)
> -PHYSICAL ADDRESS
>
> *REMEMBER REPLY WITH ALL OF THE ABOVE INFORMATION INCLUDED
> TO BE ELIGABLE FOR THE FREE MARKETING AND SITE! REPLY NOW!
> NO OBLIGATION, EXCEPT TO RECEIVE MORE INFO!
>
>
>
>
>