Is This Legitimate?

Collapse
This topic is closed.
X
X
 
  • Time
  • Show
Clear All
new posts
  • cabinetman
    Gone but not Forgotten RIP
    • Jun 2006
    • 15216
    • So. Florida
    • Delta

    #1

    Is This Legitimate?

    I click on my MSN tab, or type in msn.com for one of my hotmail accounts and get this page:

    Your account has been blocked
    Why are you seeing this?
    Someone may have used your account to send out a lot of junk messages (or something else that violates the Windows Live Terms of Service).
    We're here to help you get your account back.
    What do you need to do?
    We'll ask you to provide us with a mobile phone number where we can send you a verification code and we'll add this phone number to your Windows Live profile for future use. After you enter the code, you can change your password and sign in.
    We've cleaned your account settings
    Often customers get here because someone else has access to your account and are using it without your knowledge to send spam. To protect you and your contacts, we've removed any Hotmail auto-replies or linked accounts you may have had.


    When I click on 'continue', I get this page:

    Enter a phone number to receive a verification code
    We'll only use your phone number to help you get back into your account.
    Phone number:
    (XXX) XXX-XXXX
    Get your code by: Text message Automated call
    I already have a code
    If you don't have a phone, or if your country/region is not listed, contact customer support.

    Since I don't want to give a phone number, I clicked on 'contact customer support'. When I clicked on that, I get this page:

    Recover your Windows Live account
    *Required information
    Which account are you trying to recover?

    *Windows Live ID:


    Where should we contact you?
    Enter an email address that's different from the one you're trying to recover.

    *Email address:


    Enter an email address we can use to contact you. If you don't have another email address, create a new one with Hotmail.
    Enter the characters you see New | Audio | Help
    [Image of Verification]

    When I fill in the blanks with a different email, I get this page:

    Recover your Windows Live account
    Help us to make sure that this is you. To recover your account, enter as much information as you can.
    Account information
    First Name:
    Last Name:
    Birth date:
    Country/region:
    The secret answer to your question: Best childhood friend
    Which passwords have you used for this account? (Enter one password per text box.):
    Hotmail information
    What was the subject line of some of the email messages you've recently sent? (Enter one subject line per text box.):
    Name some of the folders you've created. Don't use default folders such as Junk, Drafts, and Sent. (Enter one folder name per text box.):
    What are the email addresses of some of the contacts you've recently sent mail to? (Enter one email address per text box.):
    Billing information
    Last five digits of the Xbox LIVE or Zune pre-paid card number:
    Name as it appears on credit card:
    Last four digits of the credit card number:
    Credit card expiration date:


    Since I can't get into my email to get addresses or subject matter, and since I don't want to give credit information, I'm stumped as to what to do. Any suggestions?

    .
  • scmhogg
    Veteran Member
    • Jan 2003
    • 1839
    • Simi Valley, CA, USA.
    • BT3000

    #2
    That sounds awfully fishy to me.

    Steve
    I would never die for my beliefs because I might be wrong. Bertrand Russell

    Comment

    • Richard in Smithville
      Veteran Member
      • Oct 2006
      • 3014
      • On the TARDIS
      • BT 3100

      #3
      Sounds to me like a trojan or something has gotten into your computer. You may need a commercial seek and destroy program to ferret it out.
      From the "deep south" part of Canada

      Richard in Smithville

      http://richardspensandthings.blogspot.com/

      Comment

      • JoeyGee
        Veteran Member
        • Nov 2005
        • 1509
        • Sylvania, OH, USA.
        • BT3100-1

        #4
        Close everything and run an anti-malware application to clean everything. If you do not have malware protection (separate from anti-virus) download Malwarebytes from Download.com and run that.
        Joe

        Comment

        • RAFlorida
          Veteran Member
          • Apr 2008
          • 1179
          • Green Swamp in Central Florida. Gator property!
          • Ryobi BT3000

          #5
          Got to agree with Richard and Joe.

          Hopefully there wouldn't be any serious damage done. Keep us posted on this so we won't get caught with a surprise.

          Comment

          • LCHIEN
            Super Moderator
            • Dec 2002
            • 21987
            • Katy, TX, USA.
            • BT3000 vintage 1999

            #6
            sounds fishy - like it might be a phishing attack.
            What you need to do is look at the URL of the page that pops up asking for all this information. If its a microsoft address it'll have a MS.com or something like that. Should definately have a.com domain and the first or second part befomre the .com being that of the company providing the account or services. They'll try to spoof the services using an address like MSconfirmation.com but Microsoft for example would not modify their trademarked name. What you don't want to see is a domain other than .com - something ending in ru (RUssia), cn (CHina), ua (Uzbekistan) etc or any suspicious foreign country other than .com. List of country domains:
            http://www.marcaria.com/register/dom...FTSytgodfCLIYQ
            Loring in Katy, TX USA
            If your only tool is a hammer, you tend to treat all problems as if they were nails.
            BT3 FAQ - https://www.sawdustzone.org/forum/di...sked-questions

            Comment

            • jking
              Senior Member
              • May 2003
              • 972
              • Des Moines, IA.
              • BT3100

              #7
              My wife had a similar experience happen, but, she had received "undeliverable" replies about e-mails she didn't send. Several people let her know her account was sending spam e-mails. She received a similar initial e-mail as you did, but, doesn't remember much specifically that she had to do after that to get her account active again other than hotmail telling her to reset her password.

              I would suggest asking some of you contacts if they've received spam from your account. Also, look at your sent items folder. When I looked at my wifes sent items, the spam e-mails were there.

              Comment

              • Bruce Cohen
                Veteran Member
                • May 2003
                • 2698
                • Nanuet, NY, USA.
                • BT3100

                #8
                If you believe that, I know of a couple of bridges for sale cheap.

                Bruce
                "Western civilization didn't make all men equal,
                Samuel Colt did"

                Comment

                • cabinetman
                  Gone but not Forgotten RIP
                  • Jun 2006
                  • 15216
                  • So. Florida
                  • Delta

                  #9
                  I can't get into the mail service. I even tried from another computer. It's definitely Microsoft (US). I downloaded malwarebytes, and ran a scan...nada.

                  .

                  Comment

                  • jseklund
                    Established Member
                    • Aug 2006
                    • 428

                    #10
                    Try running ad-aware also.

                    If you reboot your computer and hit F8 repeatedly as soon as you see the BIOS startup screen (the logo for whoever made youre computer usually) you will get a list of options, one of which is to run in safe mode. Start up in Safe Mode and then run malware bytes.

                    Are you running any anti-virus software? If not, you should probably get some. I have used Vipre in the past and like it because you can get a license for up to 10 computers....
                    F#$@ no good piece of S#$% piece of #$@#% #@$#% #$@#$ wood! Dang. - Me woodworking

                    Comment

                    • cwsmith
                      Veteran Member
                      • Dec 2005
                      • 2806
                      • NY Southern Tier, USA.
                      • BT3100-1

                      #11
                      I don't know how MSN handles such things. I'm almost a "charter" member of AOL, and they pretty much don't "handle" such incursions of your E-mail in any way, that I am aware of.

                      While this may well be a "phishing" probe, the problem cited is real enough. I found out several months ago just how quickly your E-mail address can be infringed upon and all kinds of so-called "Robo-mailings" can be made from your address. In my particular case though, I did NOT receive any notice or inquirey from AOL about the incident, nor was any action taken on thier part.

                      But, what occured was than in an instant, my E-mail address and password was discovered, a "Robo" logged on to my account and mailed a variety of junk to the top most layer of addresses in my online "mailing address file".

                      Fortunately, my son was one of the first to receive one of these "Re-Hello" mailings, and called me immediately, asking with a chuckle, "Hey Dad, why do you think I need Cialis... you been talking to my wife?"

                      That of course wasn't funny to me and on a quick check I found that a variety of "messages" had been sent within a matter of a minute or two to over forty people in my address book. Fortunately, it was only the top layer of addresses and none of the catagorized listings were addressed.

                      Looking into how this can happen, I discovered that I had used the same password for another website to which I was a member and that site had been hacked a few months before. They had sent us all a notice but since there was no vital information there, I just never gave it a second thought.

                      However, what that hacked site had was the password I used there, and my mailing address that was listed with my membership sign-in.

                      So, as it was explained to me... all the people behind this had to do was to go to each and every address they now had and see if the person by chance used the same password. In my case, that worked and therefore I got added to thier future round of robo-mailings.

                      Of course your case may well be different and you may well not even have had a problem, as this particular instance could well be just "phishing". For my case, I learned a lesson: "Don't use the same password ever, and change it often."

                      Mine was an easy fix... I just changed my password! But it was darned embarrassing and I felt I needed to send everyone on my list an apology and an explanation.

                      Does MSN have anykind of "Support" that you can check with and verify whether or not your E-mail is in anyway official?

                      I hope this helps,

                      CWS
                      Last edited by cwsmith; 05-28-2012, 05:46 PM.
                      Think it Through Before You Do!

                      Comment

                      • cabinetman
                        Gone but not Forgotten RIP
                        • Jun 2006
                        • 15216
                        • So. Florida
                        • Delta

                        #12
                        My problem is that I can't get into that email. I've had it so long, and have never logged out, I'm not 100% sure the password I'm using is the right one. Where they ask for a 'sign in', there's no provision for the 'forgot your password?'.

                        .

                        Comment

                        • herb fellows
                          Veteran Member
                          • Apr 2007
                          • 1867
                          • New York City
                          • bt3100

                          #13
                          First, I would never click on anything in an email unless I was specifically expecting something.
                          When they tell you 'Snopes confirms this, check it out!' and give you a link, that link could go anywhere. It's kind of like buying a plane ticket that doesn't have a destination written on it. ALWAYS put snopes.com (or whatever) url into the address box manually, NEVER follow a link.

                          I would Google the sender (MSN?) and find out how to contact customer support, tell them you suspect a phishing attack and read bits of the letter to them and ask if it's the real deal.
                          You might spend a while trying to figure out who to contact, but the end result will be info 'from the horses mouth', so to speak.
                          You don't need a parachute to skydive, you only need a parachute to skydive twice.

                          Comment

                          • pelligrini
                            Veteran Member
                            • Apr 2007
                            • 4217
                            • Fort Worth, TX
                            • Craftsman 21829

                            #14
                            Looks like a total phishing scam. Asking for billing info to 'rebuild your account'? I seriously doubt MSN would ask for that.

                            I just looked for a support phone number from my MSN email pages, I haven't found one yet. I also seriously doubt they would tell their customers to call them.
                            Erik

                            Comment

                            • radhak
                              Veteran Member
                              • Apr 2006
                              • 3061
                              • Miramar, FL
                              • Right Tilt 3HP Unisaw

                              #15
                              Your MSN account has been hacked in some fashion.

                              Most of the instructions you posted seems legitimate, what MSN would like to know before they allow you access, particularly about the folder names or recent email contacts (after all, how'd they know you are the real owner!?!)

                              But, the line where they are asking for you passwords makes it shady, like phishing; and then they ask for your card details too!

                              So my opinion is somebody hacked your account, and/or your computer, and wants to dig deeper.

                              You should
                              a) Use a computer at a public library to verify you get the same problem
                              b) While there, go thru the same steps to recover your account
                              c) Frankly, allowing them to send you a verification code by texting your mobile seems safer.
                              It is the mark of an educated mind to be able to entertain a thought without accepting it.
                              - Aristotle

                              Comment

                              Working...