We’ve started to see reports of mail to HIS users that looks like this:
Dear user of his.com,
Your email account has been used to send a huge amount of unsolicited email during the recent week.
Probably, your computer had been compromised and now contains a hidden proxy server.
We recommend that you follow the instruction in the attached file in order to keep your computer safe.
Virtually yours,
The his.com team.
These messages are not from us – they’re trojans designed to trick you into opening the attached file, which, if you do, will infect your PC with whatever virus they’re trying to propagate, which will then turn your PC into a spam-sending ‘bot’ …
Messages like this should be blocked by our anti-spam/virus servers, but some do get through every now and then and you might see one. If you do, delete it.