[nsp-sec] Hotmail/MSN to WCP

[Young, Beth A.]

Hi,

We have a teacher at a small rural school district that has lost control of her Hotmail account (<adhammack at hotmail.com >) and it being used by the spammers.  She tried closing the account last week and got notification that it was closed but apparently the spammers were able to reactivate the account.

Would you nuke this account for us, please.  

Thanks,
Beth


Beth Young, CISSP
MOREnet Security
1-800-509-6673
http://www.more.net/security




> -----Original Message-----
> 
> She closed the account last week and it is still spamming.
> 
> adhammack at hotmail.com
> 
> --
> 
> From: Beth Redden [mailto:aredden at risco.k12.mo.us]
> Sent: Thursday, November 18, 2010 8:45 AM
> Subject: Risco
> 
> Return-Path: <adhammack at hotmail.com >
> X-Original-To: ahammack at risco.k12.mo.us
> Delivered-To: ahammack at risco.k12.mo.us
> Received: from cranny.more.net (cranny.more.net [207.160.130.13])
>      by blackmore.kinetic.more.net (Postfix) with ESMTP id 1AB3CB0
>      for <ahammack at risco.k12.mo.us >; Wed, 17 Nov 2010 23:50:35 -0600 (CST)
> X-Virus-Scanned: amavisd-new at more.net
> X-Spam-Flag: NO
> X-Spam-Score: -0.007
> X-Spam-Level:
> X-Spam-Status: No, score=-0.007 required=5.5
> tests=[FREEMAIL_FROM=0.001,
>      HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001,
> RFC_ABUSE_POST=0.001,
>      SPF_PASS=-0.001, TVD_SPACE_RATIO=0.001, T_RP_MATCHES_RCVD=-
> 0.01]
>      autolearn=disabled
> Received: from bay0-omc1-s10.bay0.hotmail.com (bay0-omc1-
> s10.bay0.hotmail.com [65.54.190.21])
>      by cranny.more.net (Postfix) with ESMTP id 87EF21B5641
>      for <ahammack at risco.k12.mo.us >; Wed, 17 Nov 2010 23:50:33 -0600 (CST)
> Received: from BAY145-W17 ([65.54.190.61]) by bay0-omc1-
> s10.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
>      Wed, 17 Nov 2010 21:45:28 -0800
> Message-ID: <BAY145-w173738C4E425158EE45E59AA390 at phx.gbl>
> Content-Type: multipart/alternative;
>      boundary="_60b170d5-50d5-498b-a8f3-cbc133b502a2_"
> X-Originating-IP: [109.121.209.243]
> From: April Hammack <adhammack at hotmail.com >
> To: <ahammack at risco.k12.mo.us >, <thejonesfamily5 at att.net >,
>      <sheliawagster at yahoo.com >, <sshock at gideon.k12.mo.us >,
>      <jamess at helenachemical.com >, <info at mylittlelambs.com >
> Subject:
> Date: Thu, 18 Nov 2010 00:45:28 -0500
> Importance: Normal
> MIME-Version: 1.0
> X-OriginalArrivalTime: 18 Nov 2010 05:45:28.0510 (UTC)
> FILETIME=[CE2F5DE0:01CB86E3]
>