links go to the correct places, it's the running of the .exe attachment that is the 'goal' of the spammer
FILE.965658.exe
is the name of it for what it's worth. Paycom are aware of it, apparently a lot of people are getting the email, here's the full exchange between paycom and myself (newest first)
-------------------------------------------------------
not actually. a lot of people are receiving it and we are already investigating it.
Quoting Jel <xx@xx>:
> Hi Ashley,
>
> Yeah, I got the part about it being a spoof, what I'm saying is would you
> like the email headers etc. to assist you in finding the people who started
> it?
>
>
> ----- Original Message -----
> From: <xx@xx.com>
> To: "Jel" <xx@xx.co.uk>
> Sent: Tuesday, December 20, 2005 7:13 AM
> Subject: Requested Information
>
>
> > Dear Sir or Madam:
> > Please find below the information you requested:
> >
> > someone has started this spam virus using us a forefront. we did not have
> > any
> > thing to do with this. we have our tech dept working on the problems but
> > as for
> > now please disregard the message of billing it was sent as a virus
> >
> > In the future, if you wish to auto administer your account information,
> > visit
> > our self-help page at:
> >
> >
http://www.billingsupport.com/
> >
> > Best Regards,
> >
> > Ashley E.
> >
> > Billing Support On-line Customer Service
> >
> > From US and Canada toll Free 1-800-893-xx
> > Standard International and US 1-310-827-xx
> > Standard International and US Fax 1-310-827-xx
> > Or use one of the international toll free numbers listed below
> >
> > INTERNATIONAL TOLL-FREE NUMBERS
> >
> > From Spain 00-800-PAYCOM-66 (00-800-7292-xx)
> > From UK 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Belgium 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Switzerland 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Sweden 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Norway 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Netherlands 00-800-PAYCOM-66 (00-800-7292-xx)
> > From France 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Germany 00-800-PAYCOM-66 (00-800-7292-xx)
> > From Japan 001-010-800-PAYCOM-66 (001-010-800-7292-xx)
> > From Australia 0011-800-PAYCOM-66 (0011-800-7292-xx)
> >
> > In order to take advantage of the INTERNATIONAL TOLL-FREE NUMBER, please
> > Dial the number exactly as shown. It is not necessary to dial out of the
> > Country or to dial any additional numbers.
> >
> > Business hours:
> > Open 24 hours 7 days a week for your convenience.
> >
> > Please include the original email in any replies.
> >
> > Quoting Jel <xx@xx.co.uk>:
> >
> >> Hi Ashley,
> >>
> >> I suspected it was a scam but it's very well done, the return to address
> >> etc. appears to point to yourselves. Are the email headers and message
> >> source any good to you? I can send you that info if it will assist you in
> >> any way.
> >>
> >> Kind regards,
> >>
> >> Jel
> >> ----- Original Message -----
> >> From: <xx@xx.com>
> >> To: "Jel" <xx@xx.co.uk>
> >> Sent: Tuesday, December 20, 2005 7:06 AM
> >> Subject: Requested Information
> >>
> >>
> >> > Dear Sir or Madam:
> >> > Please find below the information you requested:
> >> > Unfortunately you have been apart of an email spam virus that was has
> >> > nothing to
> >> > do withus.unfortunately or face front was put on this virus but it was
> >> > not
> >>
> >> > done
> >> > by us. There is no account with our company by this email address or
> >> > account .
> >> > sorry for any inconvience
> >> >
> >> >
> >> > In the future, if you wish to auto administer your account information,
> >> > visit
> >> > our self-help page at:
> >> >
> >> >
http://www.billingsupport.com/
> >> >
> >> > Best Regards,
> >> >
> >> > Ashley E.
> >> >
> >> > Billing Support On-line Customer Service
> >> >
> >> > From US and Canada toll Free 1-800-893-xx
> >> > Standard International and US 1-310-827-xx
> >> > Standard International and US Fax 1-310-827-xx
> >> > Or use one of the international toll free numbers listed below
> >> >
> >> > INTERNATIONAL TOLL-FREE NUMBERS
> >> >
> >> > From Spain 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From UK 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Belgium 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Switzerland 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Sweden 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Norway 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Netherlands 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From France 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Germany 00-800-PAYCOM-66 (00-800-7292-xx)
> >> > From Japan 001-010-800-PAYCOM-66 (001-010-800-7292-xx)
> >> > From Australia 0011-800-PAYCOM-66 (0011-800-7292-xx)
> >> >
> >> > In order to take advantage of the INTERNATIONAL TOLL-FREE NUMBER,
> >> > please
> >> > Dial the number exactly as shown. It is not necessary to dial out of
> >> > the
> >> > Country or to dial any additional numbers.
> >> >
> >> > Business hours:
> >> > Open 24 hours 7 days a week for your convenience.
> >> >
> >> > Please include the original email in any replies.
> >> >
> >> > Quoting Jel <xx@xx.co.uk>:
> >> >
> >> >> Hi,
> >> >>
> >> >> Got this email today, I have no clue what it pertains to, nor why
> >> >> there
> >> >> is
> >> >> an .exe file attached - is this a scam?
> >> >>
> >> >> Many thanks.
> >> >>
> >> >>
> >> >> ----- Original Message -----
> >> >> From: "Paycom Support" <xx@xx.net>
> >> >> To: "Admin" <xx@xx.co.uk>
> >> >> Sent: Tuesday, December 20, 2005 2:25 AM
> >> >> Subject: Payment Receipt
> >> >>
> >> >>
> >> >> > Dear customer.
> >> >> >
> >> >> > Thank you for your subscription to
http://www.viewpornst*rs.com.
> >> >> >
> >> >> > You have been billed as Paycom LLC for the amount of: GBP 24.95 for
30
days then GBP 24.95 recurring every 30 days.
Time: 2005-12-16 10:54:56
Transaction ID: 965658
Amount: GBP 24.95
Applied to Account #: 10915104
Pay Method: VISA
Your new subscription identification number is: 10915104, please
keep
this
number in a safe place, as it will be required
for reference in all future correspondence regarding your
membership.
Your membership access information is:
Username for your subscription: 112002
Password for your subscription: regina
Membership website:
http://www.viewpornstars.com
For further details regarding this transaction and direct access to our online billing support services, available 24-hours a day, 365-days a year, please check your transaction details in attachment.
Thank you for choosing Paycom as the eMerchant for your
subscription!
Customer Support
****************************************
Billing services provided by Paycom, LLC
---------------------------------------------------------
(I did start to remove all those >>> characters and get the sentences more reader friendly but stopped early cos it's early here, should still be able to make sense of it)