Oh boy, more Nuwar tricks!

Received two notices for sites we did not join -
Web Connects and Downloader Heaven, both had user/members numbers, temp login info, and passwords. Did try to email request remove to sender – failed. Did not use links. Are we O.K.?

These emails are being sent by a virus, not by an actual company, so reporting it to law enforcement won’t help. The emails are entirely faked, the site they send you to only exists to install a virus on your machine. You never paid for anything related to the email, that’s just what they want you to think. They want to scare or titillate you into clicking the link, so your machine can be infected.

The *best* thing you can do is to delete these emails. If an email you receive has a link or an attachment and is suspicious in any way, delete it. Don’t recognize the sender or the company it mentions? Delete it. The language doesn’t really sound like something a sender you know would say? Delete it. No joke – your most personal data depends on it.

You should never, ever click on a link or open an attachment you’re not expecting, without first getting an explanation from the sender. Even then, exercise caution and suspicion. If the email is from a virus, you’re not going to get an explanation back. If you’re being targeted by a scam artist, you may…so please be cautious.

I just got the same thing Alyssa did. What do I do next?
I can’t get in with that IP address. If I try to log in they take
me to where I have to pay, and I already paid otherwise
we wouldn’t have a username, password and etc, right?

Who do we report this ripoff to anyway? Is there a way to
get into the site we paid for? What kind of crap is this
Downloader Heaven anyway? I guess we can’t get our
money back. I was thinking of reporting this to my Attorney
General’s office and/or some office where they would actually investigate this mess.

Any suggestions?

When in doubt with any email that seems fishy to you, just delete it. Plain and simple – it’s not rude, it’s being safe. If you get something fishy that appears to be from someone you know, double-check before clicking any links or file attachments.

If you want to check detection within your spam or AV product, contact technical support for the product. It may be that you need a particular update or certain settings adjusted, for instance.

what are we supposed to do if we recieve this “downloader heaven” email saying we’re a “new member”?? just delete it?

Any word on how to adjust filtering for this? Is the current .DAT definition list updated to catch this?

SO THEN WHAT DO WE DO WHEN WE RECIEVE THESE MESSAGES?? I GOT MINE IN MY IN BOX, NOT MY JUNK BOX.

Yes, I got this, how do you stop these emails???????????????? and how did I get it??

Thanks

John

Yes I recieved one of these today. I don’t dare open any links
August 21 07

I got the same email just now! I erased the link so noone would click it.

Welcome Member,
>>
>> We are so happy you joined Downloader Heaven.
>>
>> Confirmation Number: 63513433981
>> Temp Login ID: user8679
>> Your Temp. Password ID: ts136
>>
>> Please Change your login and change your Login Information.
>>
>> This link will allow you to securely change your login info: (LINK
WAS
>> HERE)
>>
>> Thank You,
>> New Member Technical Support
>> Downloader Heaven

here more not just listed at downloader heaven

Subject: New User Confirmation
From: “Fun World”
Content-Type: text/plain;charset=windows-1252
Content-Transfer-Encoding: 7BIT
Message-Id:
Sender: User pgejxhik
Date: Tue, 21 Aug 2007 13:40:46 +0100
Return-Path: xxxxxxxxx
X-OriginalArrivalTime: 21 Aug 2007 12:39:02.0347 (UTC) FILETIME=[40E0A9B0:01C7E3F0]

New Member,

Here is your membership info for Fun World.

Confirmation Number: 28669434
Your Login ID: user6352
Password ID: yw835

For security purposes please login and change the temporary Login ID and Password.

Click here to enter our secure server: http://xxx.xxx.xxx.xxx/

Enjoy,
Support Department
Fun World

then!!
email address xxxxxxxxx
Welcome,

Welcome To Downloader Heaven.

Member Number: 917475353
Temorary Login: user7118
Password ID: pi997

Be Secure. Change your Login ID and Password.

Click on the secure link or paste it to your browser: http://xxx.xxx.xxx.xxx/

Welcome,
Support Department
Downloader Heaven

here me last one
Welcome Member,

Here is your membership info for MP3 World.

User Number: 478488729432
Your Login ID: user3682
Password ID: bl406

Please Change your login and change your Login Information.

Click here to enter our secure server: http://xxx.xxx.xxx.xxx/

Enjoy,
Welcome Department
MP3 World
Subject: Please Confirm
From: “MP3 World”
Content-Type: text/plain;charset=windows-1252
Content-Transfer-Encoding: 7BIT
Message-Id:
Sender: User hjvarpx
Date: Tue, 21 Aug 2007 13:40:08 +0100
Return-Path: xxxxxxxxx
X-OriginalArrivalTime: 21 Aug 2007 12:38:22.0043 (UTC) FILETIME=[28DAC2B0:01C7E3F0]

so there not just useing one name many lol hope it helps.