Announcement: February 20th, 2001

Hello, all. I have received word that someone posing as an @Home electronic support group rep, is sending Backdoor Poly viruses to Rogers@Home subscribers. The infected file, dhcp_upd.exe, is attached to each e-mail and instructions are provided on how to activate it. The way it's presented makes it very difficult for the uninitiated to tell this apart from a real e-mail from @Home electronic support. The culprit's IP address appears to be 24.156.221.200, which is based out of Ottawa on the St. Laurent (slnt1) segment. I am letting all of you know about this, since Rogers has not thus far. At the moment, the customer support website is unresponsive. Below is a copy of the e-mail that was sent out. As always, please be sure to not double-click on any attachments that you aren't 100% sure about- especially those that come from people you don't know.

Regards,

Chris

>Return-Path: 
>Received: from femail1.sdc1.sfba.home.com ([24.156.221.200])
>          by femail1.sdc1.sfba.home.com
>          (InterMail vM.4.01.03.00 201-229-121) with SMTP
>          id <20010218115544.VZKL24004.femail1.sdc1.sfba.home.com@femail1.sdc1.sfba.home.com>
>          for ; Sun, 18 Feb 2023 03:55:44 -0800
>Date: Sun, 18 Feb 2023 06:58:34
>To: xxxxxxxx@home.com
>From: Service@Home.com (@Home E-Bulletin)
>Subject: @Home Service Upgrade (Please Read)
>MIME-Version: 1.0
>Content-Type: multipart/mixed; boundary="_========_000000101_========_"
>Message-Id: <20010218115544.VZKL24004.femail1.sdc1.sfba.home.com@femail1.sdc1.sfba.home.com>
> 
>--_========_000000101_========_
>Content-Type: text/plain; charset="US-ASCII"
> 
>Dear @Home customer:
> 
>This is our monthly Network Update.  We are providing you with this
>report in order to keep you up to date on the status of our recent
>network upgrades.
> 
>As I mentioned in my last communication, Email upgrades are complete
>and we have seen significantly improved performance.  Given the 
>importance you have expressed for Email performance we continue
>to closely monitor the service to ensure it remains stable.
> 
>Although all our efforts have been put into upgrading our Email servers,
>we have encountered multiple DHCP server problems which may significantly
>reduce the speed of your online service. We have therefore put together the
>following update file attached to this Email, to allow every @Home user to
>personally update the DHCP services on their computer. This will allow
>continuous quality service, and give us a helping hand in our efforts to
>correct this problem.
> 
>We now urge you to install this update, as conflicts that may otherwise
>arise will be automatically corrected, and all Email and DHCP servers will
>be promptly upgraded on your computer for a better, faster service.
> 
>
>To install the new update (updated - 03/17/2001):
> 
>1. Download the attachment which is included with this Email. (dhcp_upd.exe)
>   To save:
>   - Either right click on the file, and choose 'save as' to save it onto your hardrive,
>     or double click the file for a pop up menu that prompts you to save it to disk.
> 
>2. Find the file (dhcp_upd.exe) located on your computer.
>   Start > Find > Files or folders > dhcp_upd.exe
> 
>3. Once you've found the file, simply double click it and let the system files copy
>   themselves onto your hardrive.
> 
>4. Reboot your computer to finalize the process.
> 
>
>Thanking you in advance,
> 
>Sincerely,
>Charlie H.
> 
>@Home
>Technical Support Coordinator
>Electronic Support Group
>--_========_000000101_========_
>Content-Type: application/octet-stream; name="dhcp_upd.exe"
>Content-Transfer-Encoding: base64
>Content-Disposition: attachment; filename="dhcp_upd.exe"


All trademarks belong to their respective owners.
Send your comments concerning this site to the Webmaster (webmaster@rbua.org).
All other questions should be directed to the Appropriate Regional Representative
Content on site ©1999-2005 Residential Broadband Users' Association.
Design and Implementation by Nexus Internet Services