James281

Could one of the machines in your group be virus infected? If all 15 users have each other in their address book that would be a possible cause for such a high volume. Do the attachments have similar names? Good Luck <{POST_SNAPBACK}> well as i understand, even if a machine doesn't have virus protection, you would have to download the attachment and unzip to get infected. and i am sure non of the account we have here download any of the attachment. there's around 20 computer from where i am at with the posibility of having all of our email in its address book. anyway this is the virus its been looping around for a few days now. W32.Sober.O@mm Win32.Sober.N [Computer Associates], Sober.P [F-Secure], W32/Sober.p@MM [McAfee], W32/Sober-N [sophos], WORM_SOBER.S [Trend Micro] http://securityresponse.symantec.com/avcen...sober.o@mm.html

sure i can see that happen .. but not to all 15+ emails account.

i did set the default email address to :fail: like i said i don't mind if we in all 10 emails getting maybe 1-2 virus a week. but we getting 20+ email with virus a day!!! and this incident just recently happen that is why i asked you guys for help. and we all do have anti-virus software.

i don't care if i get one virus a week or maybe one a day.. but in all we have around 10-20 account on our domain and every single account getting around 20 viruses a day and they are all the same on all acount. if this is not abuse then what is? we all have virus scan on our computer but its sure is anoying to keep on getting virus. i think mine is disable right now, but spam isn't the problem, all computer here using office 2003 which have spam filter and it work pretty well most of the spam got filter out. but i will enable this spamassassin in.

in our domain, almost everyone here at my company getting virus everyday now the incident just started on May 03, 2005. most of the virus are the same, send to a non existing account which were never got set up. right now i myself just got around 20 viruses today. i've contacted the tech support but they were no help. how long is this abuse going to be? My figure is if this doesn't stop i think its time to say bye bye TotalChoiceHosting. here are some of the header... >Return-path: <service@aol.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 13:10:01 -0500 Received: from [70.112.127.248] (helo=dmsml.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTOJm-00027o-3d; Wed, 04 May 2005 13:10:00 -0500 From: service@aol.com To: addressOf@cpdhouston.com Date: Wed, 04 May 2005 17:42:42 GMT Subject: FwD: mailing error Importance: Normal X-Mailer: AnonMail_Version 10.37 X-Priority: 3 (Normal) Message-ID: <acf07.4210d90be39@aol.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="==9bf088.30b1b73ba" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <service@ms-mss-06.texas.rr.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 12:35:29 -0500 Received: from [70.112.127.248] (helo=nxtovbs.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTNmQ-0008B0-Jn; Wed, 04 May 2005 12:35:29 -0500 From: service@ms-mss-06.texas.rr.com To: freemail@cpdhouston.com Date: Wed, 04 May 2005 17:22:07 GMT Subject: Your Password Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: <334fa5ca.74d0f4a535@ms-mss-06.texas.rr.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=====f3cbab.b186ad86f208eeb2a" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <info@hotmail.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 11:33:31 -0500 Received: from [70.112.127.248] (helo=esaqtdh.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTMoS-0000Sx-Qh; Wed, 04 May 2005 11:33:31 -0500 From: info@hotmail.com To: Your-Account@cpdhouston.com Date: Wed, 04 May 2005 16:22:50 GMT Subject: FwD: Registration Confirmation Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: <4acf5.e21fe040e1e@hotmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=====a5a8b0eeab9ae" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <webmaster@hotmail.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 09:32:10 -0500 Received: from [70.112.127.248] (helo=ymwmxhn.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTKv0-0008B2-FM; Wed, 04 May 2005 09:32:09 -0500 From: webmaster@hotmail.com To: 3Dkprice@cpdhouston.com Date: Wed, 04 May 2005 14:19:32 UTC Subject: Your Password Importance: Normal X-Priority: 3 (Normal) Message-ID: <e73fcdec6772.cf9c1fb@hotmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===47a1d7daf1393d3b" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <postmaster@hotmail.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 07:34:28 -0500 Received: from [70.112.127.248] (helo=jnciiq.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTJ57-00013o-Vf; Wed, 04 May 2005 07:34:28 -0500 From: postmaster@hotmail.com To: mail@cpdhouston.com Date: Wed, 04 May 2005 12:21:10 GMT Subject: FwD: Registration Confirmation Importance: Normal X-Priority: 3 (Normal) Message-ID: <57cc3c7.ebd9e5cc@cpdhouston.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="==ce7f9bb4f2f.16dabed0de5" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <service@aol.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 10:33:37 -0500 Received: from [70.112.127.248] (helo=xfoyi.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTLsU-0003zB-JH; Wed, 04 May 2005 10:33:36 -0500 From: service@aol.com To: mail@cpdhouston.com Date: Wed, 04 May 2005 15:28:13 GMT Subject: Registration Confirmation Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: <f642c8984abac89b5300@aol.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="====ca3d93065bcb" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <hostmaster@ecrushmail.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 08:31:33 -0500 Received: from [70.112.127.248] (helo=drbqdl.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTJyO-00048H-2y; Wed, 04 May 2005 08:31:33 -0500 From: hostmaster@ecrushmail.com To: Recipient@cpdhouston.com Date: Wed, 04 May 2005 13:18:02 UTC Subject: FwD: mailing error Importance: Normal X-Mailer: AnonMail_Version 8.72 X-Priority: 3 (Normal) Message-ID: <ceac7d9a55.f1c4b8@ecrushmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="====2cd021997da2b.c5c" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <hostmaster@hotmail.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 06:40:17 -0500 Received: from [70.112.127.248] (helo=yepmcdsvf.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTIEg-0006U8-39; Wed, 04 May 2005 06:40:17 -0500 From: hostmaster@hotmail.com To: jyevans@cpdhouston.com Date: Wed, 04 May 2005 11:27:13 UTC Subject: Your Password Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: <f2ec79.aadf8024a9d4@hotmail.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=041ce01dc1ea.bec4a5eec5" Content-Transfer-Encoding: 7bit --------------------------------------------------------------------- Return-path: <postmaster@ms-mss-04.texas.rr.com> Envelope-to: rsiefert@cpdhouston.com Delivery-date: Wed, 04 May 2005 07:47:43 -0500 Received: from [70.112.127.248] (helo=pporjgk.com) by server57.totalchoicehosting.com with smtp (Exim 4.44) id 1DTJHw-0001iV-O4; Wed, 04 May 2005 07:47:43 -0500 From: postmaster@ms-mss-04.texas.rr.com To: addressOf@cpdhouston.com Date: Wed, 04 May 2005 12:38:09 UTC Subject: Registration Confirmation Importance: Normal X-Mailer: AnonMail_Version 6.38 X-Priority: 3 (Normal) Message-ID: <d3cccd.c47e74d6312ef@ms-mss-04.texas.rr.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="=6dd4aad2c.d3159a8e" Content-Transfer-Encoding: 7bit

X-Symantec-TimeoutProtection: 0 Return-path: <> Envelope-to: noreply@cpdhouston.com Delivery-date: Wed, 04 Aug 2004 19:28:17 -0500 Received: from mailnull by server57.totalchoicehosting.com with local (Exim 4.34) id 1BsW7F-0003Ds-OT for noreply@cpdhouston.com; Wed, 04 Aug 2004 19:28:17 -0500 X-Failed-Recipients: lane@cpdhouston.com Auto-Submitted: auto-generated From: Mail Delivery System <Mailer-Daemon@server57.totalchoicehosting.com> To: noreply@cpdhouston.com Subject: Mail delivery failed: returning message to sender Message-Id: <E1BsW7F-0003Ds-OT@server57.totalchoicehosting.com> Date: Wed, 04 Aug 2004 19:28:17 -0500 Content-Transfer-Encoding: base64 virus generate this message with an attachment ---------------------------------------------------------------- Dear user of cpdhouston.com, We have found that your e-mail account has been used to send a huge amount of spam during this week. We suspect that your computer was infected and now contains a hidden proxy server. We recommend you to follow the instructions in the attachment in order to keep your computer safe. Have a nice day, The cpdhouston.com team. ----------------------------------------------------------------- i got norton so it delete the message before it infected my address book. my question is, why is this message being send by <Mailer-Daemon@server57.totalchoicehosting.com> ?? is someone on the server being infected? or the server is infected? I got this email probably 2x a day same email being send for this whole week. lane at cpdhouston.com is valid address though noreply at cpdhouston.com is not valid and when the address is not valid it forward to the master account.

my server is TCH server57 and i was just asking a random question about the email problem though my register.. nothing to do with the server i don't think. the domain were bought through registerfly.com for some reason www.cpdhouston.com is not working and http://cpdhouston.com is working..

i understand that, but unfortunately as you can see i don't have my domain with tch, and this is why i ask this question.

well my email work fine but other people using the domain email said they think there is some email that they should recieve but didn't.. i check in registerfly.com where i bought the domain.. it have this dns setting i have no clue should i set it up or not.. i have other domain with them and some i didn't even set this up but still got my mail okay.. anyone here know this stuff?

here is another picture from a different view... Rock Sign

ahhh great i'm just right on for this one.. have anyone here saw a totalchoicehosting calendar before? well if you haven't you will see it here be warn... this is a full 1mb+ picture without any resize.

so where did everyone bought your domain from?? i got mine at www.registerfly.com

i have another question about the email, since i haven't do the DNS forward i want to ask this first. this host is for a small company and we want to know how can we do email forward form old alias. for example i have James@example.com before and it used to forward to my new email box. how do i set this up in cpanel?

i've just order the deluxe server plan using credit card, as to what i see in the email it will take 6-24hrs to process and i want to know what's the next step that i need to do. my main question is how come when i check out, there is no option to do one time payment for one year. i don't want to have to worry about this every month. i could be wrong but i hope if i pay by monthly this would be automatic take out from the creditcard i use.