# Got this........\[spam message\]

**URL:** <https://boards.straightdope.com/t/got-this-spam-message/529954>\
**Category:** Factual Questions\
**Created:** [February 22, 2010, 6:25am UTC](https://boards.straightdope.com/t/got-this-spam-message/529954 "2010-02-22T06:25:09Z")\
**Posts on this page:** 9\
**Page:** 2

<div class="post-metadata">

**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\
**Post date:** [February 22, 2010, 10:01pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/21 "2010-02-22T22:01:27Z")

</div>

> [@Quasimodem](#):
>
> Your computer was noticed in email spam. It is quite possible that it is a part of botnet ([Botnet - Wikipedia](http://en.wikipedia.org/wiki/Botnet))

Something else occurs to me: if you hover over this link **in the original email** look at the address that comes up in the address bar: you may well find that it is different. this is a common attack ploy which exploits a bug in HTML. It’s tempting you to click on it but will send you to somewhere else entirely. That somewhere else being entirely malicious.

---

<div class="post-metadata">

**Author:** ![yoyodyne](https://avatars.discourse-cdn.com/v4/letter/y/a9a28c/32.png) [@yoyodyne](https://boards.straightdope.com/u/yoyodyne)\
**Post date:** [February 22, 2010, 10:19pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/22 "2010-02-22T22:19:31Z")

</div>

If I understand correctly, the original email has nothing to do with the WOW account, it was simply sent to your email address. This kind of phishing happens all the time. Don’t go into panic mode yet.

Uninstall AVG, install MSE, and run a full scan.

---

<div class="post-metadata">

**Author:** ![Quartz](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/quartz/32/267_2.png) [@Quartz](https://boards.straightdope.com/u/Quartz)\
**Post date:** [February 23, 2010, 12:28am UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/23 "2010-02-23T00:28:29Z")

</div>

> [@yoyodyne](#):
>
> If I understand correctly, the original email has nothing to do with the WOW account, it was simply sent to your email address. This kind of phishing happens all the time. Don’t go into panic mode yet.

Except it linked his email address with his toon id. That’s more serious.

---

<div class="post-metadata">

**Author:** ![AmunRa](https://avatars.discourse-cdn.com/v4/letter/a/3d9bf3/32.png) [@AmunRa](https://boards.straightdope.com/u/AmunRa)\
**Post date:** [February 23, 2010, 4:03am UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/24 "2010-02-23T04:03:33Z")

</div>

> [@psychonaut](#):
>
> Can you think of any reason that the virus scanner website mentioned by the OP is hosted in India?
> 
> Note that domain names have nothing to do with where the server is located. It is often an indication of where the name itself was registered, but the website could be hosted just about anywhere.
> 
> In the case of virus-total.in, IP geolocation tools put the server in Beijing.

And the WHOIS shows that the domain is registered with an apparently fake address in Memphis, Tennesee.

So basically the fact that it is a non standard TLD, hosted in China, and registered to a fake US address just tells us what we already know; there is nothing legit about this email.

Also the second domain, [pathpartner.com](http://pathpartner.com), is registered in Michigan to Vineyard Enterprises LLC and hosted in California. However if it is a legit company then it has no online presence at all.

---

<div class="post-metadata">

**Author:** ![Quasimodem](https://avatars.discourse-cdn.com/v4/letter/q/e274bd/32.png) [@Quasimodem](https://boards.straightdope.com/u/Quasimodem)\
**Post date:** [February 23, 2010, 4:35am UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/25 "2010-02-23T04:35:00Z")

</div>

Well, I’ve gone round and round with AVG all night in e-mails, and nothing they tell me to do is working, so… to keep protected I downloaded the free AVG 9.0.

I can go to Control Panel and uninstall it, I guess, but SOMETHING is causing me not to be able to reload my PAID version which has a lot more bells and whistles on it.

Currently running a total scan…

ETA: I’ve asked them to go to remote access with me repeatedly (they supposedly have this capability), but they keep sending me different stuff to try. I wrote them back telling them I have reached the limits of my computer smarts.

Anyone HERE have AVG?

---

<div class="post-metadata">

**Author:** ![yoyodyne](https://avatars.discourse-cdn.com/v4/letter/y/a9a28c/32.png) [@yoyodyne](https://boards.straightdope.com/u/yoyodyne)\
**Post date:** [February 23, 2010, 1:36pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/26 "2010-02-23T13:36:33Z")

</div>

> [@Quartz](#):
>
> Except it linked his email address with his toon id. That’s more serious.

No, the two are similar but different. There’s no indication the sender knows anything about it.

---

<div class="post-metadata">

**Author:** ![anson2995](https://avatars.discourse-cdn.com/v4/letter/a/c77e96/32.png) [@anson2995](https://boards.straightdope.com/u/anson2995)\
**Post date:** [February 23, 2010, 3:20pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/27 "2010-02-23T15:20:09Z")

</div>

> [@Quasimodem](#):
>
> Well, I’ve gone round and round with AVG all night in e-mails, and nothing they tell me to do is working, so… to keep protected I downloaded the free AVG 9.0.
> 
> I can go to Control Panel and uninstall it, I guess, but SOMETHING is causing me not to be able to reload my PAID version which has a lot more bells and whistles on it.
> 
> Currently running a total scan…
> 
> ETA: I’ve asked them to go to remote access with me repeatedly (they supposedly have this capability), but they keep sending me different stuff to try. I wrote them back telling them I have reached the limits of my computer smarts.
> 
> Anyone HERE have AVG?

It could be something else, but the inability to run the AVG makes me 99% sure you have some sort of virus already. Many viruses are designed to block anti virus software and system tools like task manager, and even to hijack your browser if you attempt to navigate to security sites or download new software.

The SecurityTango website walks you through the task of defeating this… basically, boot in safe mode, run a series of tools designed to kill spyware, malware, and viruses, and then reinstall a fresh version of antivirus. All of these tools are free, and the site was created by a Computer Science professor who hosts a radio show and writes a syndicated column on computing.

If you don’t feel comfortable doing this yourself, take it to a local shop and let them tackle it. They do this stuff all the time. The AVG folks aren’t going to do it for you.

---

<div class="post-metadata">

**Author:** ![Quasimodem](https://avatars.discourse-cdn.com/v4/letter/q/e274bd/32.png) [@Quasimodem](https://boards.straightdope.com/u/Quasimodem)\
**Post date:** [February 23, 2010, 3:25pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/28 "2010-02-23T15:25:55Z")

</div>

Well, the free AVG scan didn’t turn up anything at all. I did boot into safe mode last night but got the hell out when it asked me to choose cd rom, Master/Slave, or some Hitachi thing. I was afraid I’d screw something up, so if this continues, I WILL take it to someone.

Thanks

Quasi

---

<div class="post-metadata">

**Author:** ![Quasimodem](https://avatars.discourse-cdn.com/v4/letter/q/e274bd/32.png) [@Quasimodem](https://boards.straightdope.com/u/Quasimodem)\
**Post date:** [February 28, 2010, 11:22pm UTC](https://boards.straightdope.com/t/got-this-spam-message/529954/29 "2010-02-28T23:22:18Z")

</div>

… but due to my gut-bug, I haven’t felt well enough to sit in front of the computer long enough to tell you that AVG came through with remote assistance, fixed my problems and re-installed 9.0, so I’m fine now.

I’ll tell y’all like I told the guy who helped me remotely though: If I had had to do all of what he did on my own? Noah Effingway!🙂

I also want to thank my friend Bill from Scotland, who stepped up like he always does, and sent me some really good instructions to help me with this should it happen again.

Bill is also the one who got me my blog back when I lost it on google recently.

That man has the patience of Job, because it took like 3 weeks for him to deal with me and my cluelessness.:eek:

Thanks Bill! Wish I could buy you a pint!🙂

Bill

ETA: Man! I am so proud that I have so many international friends! 🙂

[Previous page](https://boards.straightdope.com/t/got-this-spam-message/529954.md?page=1)
