1. Advertising
    y u no do it?

    Advertising (learn more)

    Advertise virtually anything here, with CPM banner ads, CPM email ads and CPC contextual links. You can target relevant areas of the site and show ads based on geographical location of the user if you wish.

    Starts at just $1 per CPM or $0.10 per CPC.

YAHOO has the WORST Email Security!!! Here is a PROOF!

Discussion in 'Yahoo' started by Website_Playboy, Dec 5, 2011.

  1. #1
    I am a computer geek and i work online. Yesterday i received an email from USPS and downloaded the attached file. Eventhough the file icon was a pdf icon, i saw the extension was EXE right after i clicked it and i realized i just clicked a trojan/virus/spam/whatever you call it... below is the email i have sent to yahoo today. If the language is too harsh to publish it on this forum, please censor few words only and not delete the entire post because i want people to know about this horrible email security system yahoo provides.

    One more thing, i have been using yahoo email more than 15 years. But enough is enough. Just like how i switched to google search from yahoo; i am switching to gmail instead of yahoo email.

    Email Header:
    From USPS Service Sun Dec 4 22:37:04 2011
    X-Apparently-To: *****@yahoo.com via 66.163.179.145; Sun, 04 Dec 2011 14:37:52 -0800
    Return-Path: <information@usps.com>
    X-YahooFilteredBulk: 186.104.207.152
    Received-SPF: softfail (transitioning domain of usps.com does not designate 186.104.207.152 as permitted sender)
    X-YMailISG: Ay08UY0WLDtTEnHQ6nRHNDF4SsCdAcSk021.k_LwzwmfSZSP
    6jaqLdDeOTvaCJl6_9Al9CA_yAaLi6bkCqIe5.fLPbPChrwIUT FuBl2tFOIR
    E4YR5rnpLMh2oY5GkJDn_bSzr9u.FneRhVFjgO2MAUVID2d6WY jWxqPOXrdl
    uFoVRBv7EL2_qvXAV38f9XzCIeG4BrzxHlX4IZTB4afXdZg_vk OoiQeuI9gW
    0erKo3N1z2SQuCAHw1On0BU2GiIMH.3tqpWzDo3eohtlVPEUpz mUfvXI2z7R
    uH6GnnPqEvhC8OTZYhlUZFg3BM8LZAYzCXB.jiGSU2aBgzb8m8 iEBoFJjJ.x
    48e9y6tEshm0LpmhqUrwNpUowbs3C7ISjhxvG6Q8HU1d0tkOHj S_vj5Phnxs
    ODuiVa1HlcncanEccUA1QyUJ51NF8sxB6_oDc15INCruNDFAAd 6_f1XEfWca
    lgngjk.Mk36bsdpcqXbvuDd92tv3DR2FcHjUuZZ8f_HMIIrXa3 IzWebak8bf
    KCHIo3mlWlcVar1B.Sm.ek89nn1CcM8FeFu48yUJfRjLaY.F7d vmPeE8S0z1
    SEHQjH9UNMehy5v9UMVVxNqQPjAZQcYL7SF6WBaTfMePwZGo04 Uk7ByA7Cc9
    ia8S_TVoMGKbHCHbZLiVSS7lrJBmwyhcx0pztGSgG.u4ZuK8Cm 2aHePLIn5U
    CmZ5t9C3krnE6Xfci.5Hy_.BfuGEnSyC6f5dpjn3XtQAokBc6c UyUWImoiAq
    gF.gv8EuIkViAUVgcUiM8AXZ1tY4GXFAGrQlP0nb3oj8eLnQv0 W5l.qAxeUy
    dZbT4kxLbriC56Ec1FHNbKZDflX4ApACflbHtW62cEsoIJWCel wE0U8Nd0rN
    y8VbZHPKp8ZWSXYSUSXZo3MVgA6sflebFooYwRDUx8HrxB5jsF zlJa2Ai0PZ
    HLfA.RQR6ZbWzkixjrE_R5e7Hi7b3w--
    X-Originating-IP: [186.104.207.152]
    Authentication-Results: mta1121.mail.mud.yahoo.com from=usps.com; domainkeys=neutral (no sig); from=usps.com; dkim=neutral (no sig)
    Received: from 127.0.0.1 (HELO usps.com) (186.104.207.152)
    by mta1121.mail.mud.yahoo.com with SMTP; Sun, 04 Dec 2011 14:37:52 -0800
    Message-ID: <002d01ccb2d5$3f5231d2$0201a8c0@ue10>
    From: "USPS Service" <information@usps.com>
    To: <****@yahoo.com>
    Subject: Your package is available for pickup.NO#638
    Date: Sun, 04 Dec 2011 19:37:04 -0300
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=_NextPart_000_002A_01CCB2BC.1A0283F0"
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.2180
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
    Content-Length: 62888
    SEMrush

    Email Content:
    Good afternoon,

    Your parcel has arrived at the post office on November 25.
    Our Driver was unable to deliver the parcel to your address.
    To receive a parcel you must go to the nearest USPS office and show your post label.
    The post label is attached to this letter.

    Thank you.
    USPS Customer Services.

    My Message to Yahoo:
    I WAS EXPECTING A PACKAGE FROM USPS AND I GOT THIS EMAIL. I DOWNLOADED THE ATTACHMENT THINKING "YAHOO ALWAYS CHECK THE ATTACHMENTS WITH NORTON AND MAKE SURE WE GET NO VIRUSES!!!!!!!!!!!"
    BUT GUESS WHAT, THIS EMAIL -PLEASE DOWNLOAD AND CLICK ON IT! OH GOD I HOPE IT DOES THE SAME THING TO YOUR COMPUTERS TOO. SO YOU WILL UNDERSTAND HOW ****ED UP YOUR EMAIL SECURITY SYSTEM IS!- MESSED UP MY COMPUTER. IT MADE ALL THE FILES AND I MEAN ALL THE FILES HIDDEN! THEN GAVE ME TONS OF ERRORS IN EVERYWHERE. IT EVEN CHANGED MY BACKGROUND PICTURE! NOW I CANT INSTALL AN ANTIVIRUS! BECAUSE IT DOESNT LET ME! I CANT KILL THE PROCESSES BECAUSE IT DELETED (OR HIDE) THE TASK MANAGER. I CANT EVEN LOOK AND SEE WHICH FILES ARE AFFECTED!!!

    THE WORST PART IS! IT DIDINT **** UP MY COMPUTER ONLY; IT ALSO ****ED MY EXTERNAL HARD DRIVE TOO!!!!!!!!!!!!!!! I HAD MY ENTIRE LIFE IN THAT HARD DRIVE!!!!!!!!!!!!!!!!

    **** YOU YAHOO MAIL!!!!!! AND **** YOU YAHOO MAIL SECURITY!!!!!!!!!!!!!
     
    Website_Playboy, Dec 5, 2011 IP
    SEMrush
  2. devcellent

    devcellent Peon

    Messages:
    45
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #2
    Sorry to hear that. I guess we need to always save the file instead of running it so that we can see the file extensions even if the icon says otherwise.
     
    devcellent, Dec 5, 2011 IP
  3. JPC-Sabrina

    JPC-Sabrina Member

    Messages:
    461
    Likes Received:
    8
    Best Answers:
    0
    Trophy Points:
    33
    #3
    It is a matter of opinion always but my opinion sways with you considering what I have seen from Yahoo of late.
     
    JPC-Sabrina, Dec 5, 2011 IP
  4. letsjoy

    letsjoy Well-Known Member

    Messages:
    1,166
    Likes Received:
    43
    Best Answers:
    0
    Trophy Points:
    160
    #4
    A computer geek never trusts a single anti virus specially Norton ;)
     
    letsjoy, Dec 5, 2011 IP
  5. Website_Playboy

    Website_Playboy Member

    Messages:
    115
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    26
    #5
    If you read the message right, you will see that NORTON is not my antivirus but its Yahoo Email Security provider in their website.
     
    Website_Playboy, Dec 5, 2011 IP
  6. marketingexpert

    marketingexpert Peon

    Messages:
    30
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #6
    I guess Kaspersky is best AntiVirus.
    As per Yahoo!, Yes I agree, I noticed spam messages get flagged as spam from Gmail and Hotmail but never from Yahoo!
    I tested this and I know that's true.
    Spammers most use yahoo and aol.

    But I do not understand how Norton didn't scan it.. anyway, new Zeus is moving around, very powerful, maybe most powerful Zeus we have seen, I downloaded source code and after 5 minutes it was self extracted without my permission, but thanks to Kaspersky :) nothing happened :)
     
    marketingexpert, Dec 5, 2011 IP
  7. miansc

    miansc Peon

    Messages:
    40
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #7
    Try using your ISP's email, if you think that's bad. All I get are viagra emails and long lost cousins that have died and left money in my name :p
     
    miansc, Dec 5, 2011 IP
  8. dennil.dennis

    dennil.dennis Peon

    Messages:
    3
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #8
    Hey friend you can use customized email Services which is paid. these mail services are more secure for handling and provide all the feature which is available on google

    you can chk it on perfectaddress com
     
    dennil.dennis, Dec 5, 2011 IP
  9. creativeorg

    creativeorg Peon

    Messages:
    19
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #9
    Yes I have also heard about that to be safe from being hacked,yahoo has made a security sutructure according to that we will be asked two questions and we can choose any manual question from the list and second time when we will login it will ask those two questions from the user.
     
    creativeorg, Dec 6, 2011 IP
  10. Matt_Baker

    Matt_Baker Peon

    Messages:
    391
    Likes Received:
    4
    Best Answers:
    0
    Trophy Points:
    0
    #10
    Oh sorry to hear about that.. I haven't encounter this kind of email.. Well thanks for this information and it made me alert on my emails :)
     
    Matt_Baker, Dec 6, 2011 IP
  11. serena85

    serena85 Peon

    Messages:
    892
    Likes Received:
    3
    Best Answers:
    0
    Trophy Points:
    0
    #11
    Sorry to hear that, have you manage to fix your PC eventually.?
     
    serena85, Dec 6, 2011 IP
  12. danasurvey

    danasurvey Well-Known Member

    Messages:
    1,975
    Likes Received:
    95
    Best Answers:
    0
    Trophy Points:
    138
    #12
    I'm also sorry to hear you ran into that and I hope you're able to fix your computer.
     
    danasurvey, Dec 6, 2011 IP
  13. tanujdude91

    tanujdude91 Notable Member

    Messages:
    1,579
    Likes Received:
    249
    Best Answers:
    0
    Trophy Points:
    220
    #13
    You should've switched to Gmail long back. Its amazing. And if you're fed up of viruses, buy yourself a macbook. :)
     
    tanujdude91, Dec 6, 2011 IP
  14. iccube

    iccube Peon

    Messages:
    220
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #14
    @ marketingexpert
    It is a great point to notice that yahoo doesn't filters the mail and its content in spam or any such other option,it is a very bad signal to users that their mail may have malicious content and they are not informed of that.
     
    iccube, Dec 7, 2011 IP
  15. Website_Playboy

    Website_Playboy Member

    Messages:
    115
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    26
    #15
    The answer from yahoo...

    Hello,

    Thank you for writing to Yahoo! Mail.

    I understand your frustration in receiving unsolicited email. While we
    investigate all reported violations against the Yahoo! Terms of Service
    (TOS), in this particular case, the message you received was not sent
    through the Yahoo! Mail system.

    Yahoo! has no control over activities outside its service, and therefore
    we cannot take action. You may try contacting the sender's email
    provider, by identifying the sender's domain and contacting the
    administrator of that domain. The sender's provider should be in a
    better position to take appropriate action against the sender's account.


    The email message itself does contain some information relating to the
    sender's identity. Yahoo! includes the originating Internet Protocol
    (IP) address in the full Internet headers of all messages sent through
    Yahoo! Mail, so that we will have information regarding the origin of
    messages sent through our system. The originating IP address should be
    located in the very last "Received" line of the full Internet headers
    and corresponds to the sender's Internet Service Provider (ISP).

    Please see the following URL for more assistance:

    All-new Mail:

    http://help.yahoo.com/l/us/yahoo/mail/yahoomail/abuse/abuse-17.html

    Mail Classic:

    http://help.yahoo.com/l/us/yahoo/mail/classic/abuse/abuse-17.html

    Mail Beta:

    http://help.yahoo.com/l/us/yahoo/mail/ymail/abuse/abuse-17.html

    Once you have identified the IP address, you can conduct an IP lookup to
    determine which ISP provides this person with Internet access. One such
    lookup tool you may want to try is:

    https://ws.arin.net/whois

    You can then attempt to contact that ISP to report any abuse activities
    occurring within their service.

    In addition, please visit the following website for useful tools to
    combat spam:

    http://antispam.yahoo.com/

    If we can be of further assistance, please let us know.

    Thank you again for contacting Yahoo! Mail.

    Regards,

    Steve

    Yahoo! Customer Care

    88332112

    For assistance with all Yahoo! services please visit:

    http://help.yahoo.com/

    [hr]

    My reply

    I understand yahoo is not responsible for the email sent by a company outside of the yahoo. Let me ask you something then,

    Doesnt yahoo provides a VIRUS CHECK before you download any attachment sent to your yahoo email??? It says every email (attachments) get checked by NORTON provided by SYMANTEC in yahoo. Do i read it wrong???

    Then my question is, if each attachment gets checked by NORTON ANTIVIRUS SYSTEM then HOW COULD YAHOO SHOWED MY THAT ATTACHMENT IS "SAFE TO DOWNLOAD" ???????? AND I ENDED UP DOWNLOADING IT!

    The most upsetting thing is that right after i sent you a report about the email, somehow, NORTON found that attachment unsafe and didint let me download it again!!! it says there is a virus in that attachment! REALLY??? Thank you NORTON! and thank you YAHOO... you did a very good job!

    I have been actively using this email address for more than 10 years. I always loved yahoo. I even insisted on sticking up with yahoo search engine against to google. But i believe its time to switch EVERYTHING to GOOGLE now~!

    I am very upset, dissappointed and mad!

    [hr]
    [hr]

    I dont think its smart to pay for an email service when huge companies provide quality service for free. Example; Google & Comcast

    I lost many programs, and items. The computer is still fighting the viruses with 3 seperate programs running the last 4 days non-stop. Its like the system is in coma and being hold at intensive care right now. I donno what is gonna happen but i really dont want to format the computer. I lost a lot and i mean a lot!

    No. i am a pc guy and i dont think i will start learning another computer structure now. I like to have the full control on my software and hardware. Even though sometimes i lose the control. I like linux, command prompt, network security softwares etc. There are things you cant do in mac but you can do in pc.
     
    Website_Playboy, Dec 7, 2011 IP
  16. FusedNetwork

    FusedNetwork Peon

    Messages:
    47
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    0
    #16
    How are you about to complain about a service you pay nothing for? You are such an idiot to click on it and download before checking the file extension anyways.

     
    FusedNetwork, Dec 7, 2011 IP
  17. Website_Playboy

    Website_Playboy Member

    Messages:
    115
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    26
    #17
    So based on your insult, you can not complaint any services provided by this website or google or yahoo. You cant even judge them can you?
    Well i think you can and you should because even though you are not paying them, they are still making money off of you! TONS OF MONEY!

    About the extention part. Yes you are right. It was a one time mistake. I always check the extension but this time i was actually expecting an important package from USPS and i was so excited to open the attachment therefore i looked at the PDF icon and assumed the file was pdf. It was a pretty stupid accident. I am sure you are a perfect person in every way but i do mistakes sometimes.
     
    Website_Playboy, Dec 7, 2011 IP
  18. nausheen

    nausheen Member

    Messages:
    19
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    36
    #18
    That's Really sad to know that you've lost something that's very hard to recover and your system is shattered, somewhere its our mistake that we trust these services inspite of knowing that they are handling billions of accounts. Now its time to think how u can get back your valuable data and recover it.
     
    nausheen, Dec 8, 2011 IP
  19. infobanc

    infobanc Greenhorn

    Messages:
    37
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    16
    #19
    that didnt happen to me as yet. but yahoo takes time to display incoming mails.
     
    infobanc, Dec 13, 2011 IP
  20. whispertech

    whispertech Active Member

    Messages:
    176
    Likes Received:
    0
    Best Answers:
    0
    Trophy Points:
    53
    #20
    Sorry this has happened. How has the recovery process gone, did you manage to at least get some of your data back?
     
    whispertech, Dec 20, 2011 IP