YAHOO has the WORST Email Security!!! Here is a PROOF!

I am a computer geek and i work online. Yesterday i received an email from USPS and downloaded the attached file. Eventhough the file icon was a pdf icon, i saw the extension was EXE right after i clicked it and i realized i just clicked a trojan/virus/spam/whatever you call it... below is the email i have sent to yahoo today. If the language is too harsh to publish it on this forum, please censor few words only and not delete the entire post because i want people to know about this horrible email security system yahoo provides.

One more thing, i have been using yahoo email more than 15 years. But enough is enough. Just like how i switched to google search from yahoo; i am switching to gmail instead of yahoo email.

Email Header:
From USPS Service Sun Dec 4 22:37:04 2011
X-Apparently-To: *****@yahoo.com via 66.163.179.145; Sun, 04 Dec 2011 14:37:52 -0800
Return-Path: <information@usps.com>
X-YahooFilteredBulk: 186.104.207.152
Received-SPF: softfail (transitioning domain of usps.com does not designate 186.104.207.152 as permitted sender)
X-YMailISG: Ay08UY0WLDtTEnHQ6nRHNDF4SsCdAcSk021.k_LwzwmfSZSP
6jaqLdDeOTvaCJl6_9Al9CA_yAaLi6bkCqIe5.fLPbPChrwIUT FuBl2tFOIR
E4YR5rnpLMh2oY5GkJDn_bSzr9u.FneRhVFjgO2MAUVID2d6WY jWxqPOXrdl
uFoVRBv7EL2_qvXAV38f9XzCIeG4BrzxHlX4IZTB4afXdZg_vk OoiQeuI9gW
0erKo3N1z2SQuCAHw1On0BU2GiIMH.3tqpWzDo3eohtlVPEUpz mUfvXI2z7R
uH6GnnPqEvhC8OTZYhlUZFg3BM8LZAYzCXB.jiGSU2aBgzb8m8 iEBoFJjJ.x
48e9y6tEshm0LpmhqUrwNpUowbs3C7ISjhxvG6Q8HU1d0tkOHj S_vj5Phnxs
ODuiVa1HlcncanEccUA1QyUJ51NF8sxB6_oDc15INCruNDFAAd 6_f1XEfWca
lgngjk.Mk36bsdpcqXbvuDd92tv3DR2FcHjUuZZ8f_HMIIrXa3 IzWebak8bf
KCHIo3mlWlcVar1B.Sm.ek89nn1CcM8FeFu48yUJfRjLaY.F7d vmPeE8S0z1
SEHQjH9UNMehy5v9UMVVxNqQPjAZQcYL7SF6WBaTfMePwZGo04 Uk7ByA7Cc9
ia8S_TVoMGKbHCHbZLiVSS7lrJBmwyhcx0pztGSgG.u4ZuK8Cm 2aHePLIn5U
CmZ5t9C3krnE6Xfci.5Hy_.BfuGEnSyC6f5dpjn3XtQAokBc6c UyUWImoiAq
gF.gv8EuIkViAUVgcUiM8AXZ1tY4GXFAGrQlP0nb3oj8eLnQv0 W5l.qAxeUy
dZbT4kxLbriC56Ec1FHNbKZDflX4ApACflbHtW62cEsoIJWCel wE0U8Nd0rN
y8VbZHPKp8ZWSXYSUSXZo3MVgA6sflebFooYwRDUx8HrxB5jsF zlJa2Ai0PZ
HLfA.RQR6ZbWzkixjrE_R5e7Hi7b3w--
X-Originating-IP: [186.104.207.152]
Authentication-Results: mta1121.mail.mud.yahoo.com from=usps.com; domainkeys=neutral (no sig); from=usps.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (HELO usps.com) (186.104.207.152)
by mta1121.mail.mud.yahoo.com with SMTP; Sun, 04 Dec 2011 14:37:52 -0800
Message-ID: <002d01ccb2d5$3f5231d2$0201a8c0@ue10>
From: "USPS Service" <information@usps.com>
To: <****@yahoo.com>
Subject: Your package is available for pickup.NO#638
Date: Sun, 04 Dec 2011 19:37:04 -0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_002A_01CCB2BC.1A0283F0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Content-Length: 62888


Email Content:
Good afternoon,

Your parcel has arrived at the post office on November 25.
Our Driver was unable to deliver the parcel to your address.
To receive a parcel you must go to the nearest USPS office and show your post label.
The post label is attached to this letter.

Thank you.
USPS Customer Services.

My Message to Yahoo:
I WAS EXPECTING A PACKAGE FROM USPS AND I GOT THIS EMAIL. I DOWNLOADED THE ATTACHMENT THINKING "YAHOO ALWAYS CHECK THE ATTACHMENTS WITH NORTON AND MAKE SURE WE GET NO VIRUSES!!!!!!!!!!!"
BUT GUESS WHAT, THIS EMAIL -PLEASE DOWNLOAD AND CLICK ON IT! OH GOD I HOPE IT DOES THE SAME THING TO YOUR COMPUTERS TOO. SO YOU WILL UNDERSTAND HOW ****ED UP YOUR EMAIL SECURITY SYSTEM IS!- MESSED UP MY COMPUTER. IT MADE ALL THE FILES AND I MEAN ALL THE FILES HIDDEN! THEN GAVE ME TONS OF ERRORS IN EVERYWHERE. IT EVEN CHANGED MY BACKGROUND PICTURE! NOW I CANT INSTALL AN ANTIVIRUS! BECAUSE IT DOESNT LET ME! I CANT KILL THE PROCESSES BECAUSE IT DELETED (OR HIDE) THE TASK MANAGER. I CANT EVEN LOOK AND SEE WHICH FILES ARE AFFECTED!!!

THE WORST PART IS! IT DIDINT **** UP MY COMPUTER ONLY; IT ALSO ****ED MY EXTERNAL HARD DRIVE TOO!!!!!!!!!!!!!!! I HAD MY ENTIRE LIFE IN THAT HARD DRIVE!!!!!!!!!!!!!!!!

**** YOU YAHOO MAIL!!!!!! AND **** YOU YAHOO MAIL SECURITY!!!!!!!!!!!!!

 

Sorry to hear that. I guess we need to always save the file instead of running it so that we can see the file extensions even if the icon says otherwise.

 

It is a matter of opinion always but my opinion sways with you considering what I have seen from Yahoo of late.

 

A computer geek never trusts a single anti virus specially Norton

 

If you read the message right, you will see that NORTON is not my antivirus but its Yahoo Email Security provider in their website.

 

I guess Kaspersky is best AntiVirus.
As per Yahoo!, Yes I agree, I noticed spam messages get flagged as spam from Gmail and Hotmail but never from Yahoo!
I tested this and I know that's true.
Spammers most use yahoo and aol.

But I do not understand how Norton didn't scan it.. anyway, new Zeus is moving around, very powerful, maybe most powerful Zeus we have seen, I downloaded source code and after 5 minutes it was self extracted without my permission, but thanks to Kaspersky nothing happened

 

Try using your ISP's email, if you think that's bad. All I get are viagra emails and long lost cousins that have died and left money in my name

 

Hey friend you can use customized email Services which is paid. these mail services are more secure for handling and provide all the feature which is available on google

you can chk it on perfectaddress com

 

Yes I have also heard about that to be safe from being hacked,yahoo has made a security sutructure according to that we will be asked two questions and we can choose any manual question from the list and second time when we will login it will ask those two questions from the user.

 

Oh sorry to hear about that.. I haven't encounter this kind of email.. Well thanks for this information and it made me alert on my emails

 

Sorry to hear that, have you manage to fix your PC eventually.?

 

I'm also sorry to hear you ran into that and I hope you're able to fix your computer.

 

You should've switched to Gmail long back. Its amazing. And if you're fed up of viruses, buy yourself a macbook.

 

@ marketingexpert
It is a great point to notice that yahoo doesn't filters the mail and its content in spam or any such other option,it is a very bad signal to users that their mail may have malicious content and they are not informed of that.

 

The answer from yahoo...

Hello,

Thank you for writing to Yahoo! Mail.

I understand your frustration in receiving unsolicited email. While we
investigate all reported violations against the Yahoo! Terms of Service
(TOS), in this particular case, the message you received was not sent
through the Yahoo! Mail system.

Yahoo! has no control over activities outside its service, and therefore
we cannot take action. You may try contacting the sender's email
provider, by identifying the sender's domain and contacting the
administrator of that domain. The sender's provider should be in a
better position to take appropriate action against the sender's account.


The email message itself does contain some information relating to the
sender's identity. Yahoo! includes the originating Internet Protocol
(IP) address in the full Internet headers of all messages sent through
Yahoo! Mail, so that we will have information regarding the origin of
messages sent through our system. The originating IP address should be
located in the very last "Received" line of the full Internet headers
and corresponds to the sender's Internet Service Provider (ISP).

Please see the following URL for more assistance:

All-new Mail:

http://help.yahoo.com/l/us/yahoo/mail/yahoomail/abuse/abuse-17.html

Mail Classic:

http://help.yahoo.com/l/us/yahoo/mail/classic/abuse/abuse-17.html

Mail Beta:

http://help.yahoo.com/l/us/yahoo/mail/ymail/abuse/abuse-17.html

Once you have identified the IP address, you can conduct an IP lookup to
determine which ISP provides this person with Internet access. One such
lookup tool you may want to try is:

https://ws.arin.net/whois

You can then attempt to contact that ISP to report any abuse activities
occurring within their service.

In addition, please visit the following website for useful tools to
combat spam:

http://antispam.yahoo.com/

If we can be of further assistance, please let us know.

Thank you again for contacting Yahoo! Mail.

Regards,

Steve

Yahoo! Customer Care

88332112

For assistance with all Yahoo! services please visit:

http://help.yahoo.com/

[hr]

My reply

I understand yahoo is not responsible for the email sent by a company outside of the yahoo. Let me ask you something then,

Doesnt yahoo provides a VIRUS CHECK before you download any attachment sent to your yahoo email??? It says every email (attachments) get checked by NORTON provided by SYMANTEC in yahoo. Do i read it wrong???

Then my question is, if each attachment gets checked by NORTON ANTIVIRUS SYSTEM then HOW COULD YAHOO SHOWED MY THAT ATTACHMENT IS "SAFE TO DOWNLOAD" ???????? AND I ENDED UP DOWNLOADING IT!

The most upsetting thing is that right after i sent you a report about the email, somehow, NORTON found that attachment unsafe and didint let me download it again!!! it says there is a virus in that attachment! REALLY??? Thank you NORTON! and thank you YAHOO... you did a very good job!

I have been actively using this email address for more than 10 years. I always loved yahoo. I even insisted on sticking up with yahoo search engine against to google. But i believe its time to switch EVERYTHING to GOOGLE now~!

I am very upset, dissappointed and mad!

[hr]
[hr]

I dont think its smart to pay for an email service when huge companies provide quality service for free. Example; Google & Comcast

I lost many programs, and items. The computer is still fighting the viruses with 3 seperate programs running the last 4 days non-stop. Its like the system is in coma and being hold at intensive care right now. I donno what is gonna happen but i really dont want to format the computer. I lost a lot and i mean a lot!

No. i am a pc guy and i dont think i will start learning another computer structure now. I like to have the full control on my software and hardware. Even though sometimes i lose the control. I like linux, command prompt, network security softwares etc. There are things you cant do in mac but you can do in pc.

 

How are you about to complain about a service you pay nothing for? You are such an idiot to click on it and download before checking the file extension anyways.

 

So based on your insult, you can not complaint any services provided by this website or google or yahoo. You cant even judge them can you?
Well i think you can and you should because even though you are not paying them, they are still making money off of you! TONS OF MONEY!

About the extention part. Yes you are right. It was a one time mistake. I always check the extension but this time i was actually expecting an important package from USPS and i was so excited to open the attachment therefore i looked at the PDF icon and assumed the file was pdf. It was a pretty stupid accident. I am sure you are a perfect person in every way but i do mistakes sometimes.

 

That's Really sad to know that you've lost something that's very hard to recover and your system is shattered, somewhere its our mistake that we trust these services inspite of knowing that they are handling billions of accounts. Now its time to think how u can get back your valuable data and recover it.

 

that didnt happen to me as yet. but yahoo takes time to display incoming mails.

 

Sorry this has happened. How has the recovery process gone, did you manage to at least get some of your data back?