Smart questions
Smart answers
Smart people
Join Tek-Tips Forums
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Member Login




Remember Me
Forgot Password?
Join Us!

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips now!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!

Join Tek-Tips
*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.
Jobs from Indeed

Link To This Forum!

Partner Button
Add Stickiness To Your Site By Linking To This Professionally Managed Technical Forum.
Just copy and paste the
code below into your site.

Message showing up in outbox that I did not create subject:report frau

roryjoc (Instructor) (OP)
3 Oct 07 13:21
I noticed a message in my outbox the other day that I didn't create.  The send was completed before I was able to stop it.  I have subsequently changed my outlook settings so that I have to manually send mail.  The message appeared again today waiting in the outbox.  I checked it out and it appears to be sending some file information; as the body of the mail contained the following information:
Matador Version: 4.9.1.8211
mlfoshim.dll: 4.9.1.8211
MlfHook.dll: 4.9.1.8211
MlfOE.dll: 4.9.1.8211

The address it was sending to is: 'fraud@mailfrontier.net'

Also the message that did send did not show up in the sent items folder.

Is this activity familiar to anyone concerning a trojan, virus, malware or anything else?  My A/V is not finding anything.
brianinms (MIS)
3 Oct 07 13:25
Do you have zonealarm?
eyec (TechnicalUser)
3 Oct 07 13:40
this is a part of ZA.  it is an option for email scanning - i turned it off and use AVG for email scanning.
roryjoc (Instructor) (OP)
3 Oct 07 14:36
There was also an attachment to the e-mail that I didn't open until after I read your Responses. Here is the body of that attachment: (doesn't look like something ZA would be sending, does it?) (i am not a customer of citizens bank)

Dear business/corporate customer of Citizens Bank,

Caution: we continue to be informed that customers and non-customers are receiving fraudulent phishing emails requesting confidential information and credentials. As a reminder, the bank will NOT send customers unsecured email or other correspondence requesting that they confirm or provide Customer ID's User ID's, card numbers, social security number or PINs and passwords. As always, if you receive any unsolicited e-mails, phone calls, faxes or other suspicious attempts to gain personal or confidential information, please e-mail us at fraudprevention@cfgcustomers.com or call Cash Management Client Services at 1-877-550-5933, Monday to Friday, 7 a.m. to 6 p.m. ET. For Additional information please see the events page

For security measures, we require you to confirm your challenge questions:


http://id-570961515.citizensbankmoneymanagergps.com/securepage/challenge.aspx

Sincerely,
Citizens Bank Online Billing Services Team
roryjoc (Instructor) (OP)
3 Oct 07 15:01
You were right it is part of ZA the attachment is the message it is reporting to them.
Sorry for the confusion.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members!

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close