CONTACTS 
0201 - Earthlink, Inc.
020101 - Mr. Enrique Cxxxxx
020102 - Customer Representative
020104 - Billing Department

SUBJECTS
Virus Website Attack Welchco com Reported Attack Page Google Blocked

1503 -
1503 -    ..
1504 - Summary/Objective
1505 -
150501 - Follow up ref SDS 21 0000. ref SDS 20 0000.
150502 -
150503 -
150504 -
150505 -
150506 -
150508 -  ..
1506 -
1507 -
1508 - Background
1509 -
150901 - On 100610 Bryant assisted in opening Wells Fargo checking account,
150902 - that includes ATM services. ref SDS 6 CR7J
150904 -  ..
150905 - On 100806 received call from someone (a woman) who has prepared papers
150906 - to change the joint account set up with Millie on 100610 1110,
150907 - ref SDS 6 KD5I, into a single person account.
150909 -  ..
150910 - On 100809 0910 meeting at Wells Fargo bank to close joint account with
150911 - Millie and open new sole owner account. ref SDS 12 8349
150913 -  ..
150914 - On 100816 1238 received Visa debit card for making charges to the
150915 - checking account without writing checks. ref SDS 15 KD5I
150917 -  ..
150918 - On 100816 2104 changed Earthlink billing to reflect new account with
150919 - Millie's death on 100729. ref SDS 16 KD5I
150921 -  ..
150922 - On 100825 1037 discovered welchco.com home page reports a virus attack
150923 - on the Internet.  Called Earthlink for assistance, and they reported
150924 - there are no improper nor extraneous files on welchco.com directory.
150925 - ref SDS 17 KD5I
150927 -  ..
150928 - On 100907 1620 discovered script added to index.htm on welchco.com;
150929 - removed the script and notified Earthlnk. ref SDS 19 KD5I  Research
150930 - indicates should immediately change ftp password. ref SDS 19 EJ58
150932 -  ..
150933 - On 100908 1230 discovered Earthlink fixed the problem of Google Report
150934 - Attack Page on welchco.com, so this was a big relief. ref SDS 20 KD5I
150935 - Still having problems reported last night that new password not
150936 - supporting ftp ops on welchco.com. ref SDS 20 IQ5H
150938 -  ..
150939 - On 100910 1313 letter to Earthlink asks for assistance to submit
150940 - procedures on using "My Account" Internet address for changing
150941 - passwords to ftp files that change content on welchco.com website.
150942 - ref SDS 21 KD5I  Received letter in the afternoon from Anna with
150943 - procedures, ref SDS 21 5S8L, but still seems incomplete. ref SDS 21
150944 - 5S8L
150946 -  ..
150947 - On 100912 0628 letter to Earthlink asks for additional assistance on
150948 - accessing "My Account" because there are 2 sets of access control
150949 - data. ref SDS 0 KD5I
150950 -
150951 -
150952 -
150953 -
150954 -
150956 -  ..
1510 -
1511 -
1512 - Progress
1513 -
151301 - Work on 100908, shows all Earthlink issues are now resolved, except
151302 - need protocol for accessing "My Account," reported on 100908 1230.
151303 - ref SDS 20 F75F
151305 -  ..
151306 - Submitted letter to Earthlink saying...
151307 -
151308 -    1.  Subject: Re: My Account Access Procedures Earthlink Problem #155315240
151309 -        Date: Sun, 12 Sep 2010 06:41:49 -0700
151316 -         ..
151317 -    2.  Following guidance in your letter on 100910, ref SDS 21 5S8L,
151318 -        shown below, for subject issue, and opening URL address for My
151319 -        Account...
151320 -
151321 -           https://myaccount.earthlink.net
151323 -         ..
151324 -    3.  Presents a screen that asks for my email address and a
151325 -        password.
151327 -         ..
151328 -    4.  When I enter my email address shown above, and the new password
151329 -        created by Mike under Earthlink case number 155308001, shown on
151330 -        100907. ref SDS 19 KO9N, then I get a message that says...
151331 -
151332 -            "The email address, EarthLink ID, or password you entered
151333 -            does not match our records.  Please check your spelling and
151334 -            try again."
151336 -         ..
151337 -    5.  Therefore, I need to know what Earthlink wants entered in these
151338 -        fields in order to open the screen for performing step 3 in
151339 -        your letter on 100910. ref SDS 21 IU5G  [...reflecting 2nd case
151340 -        number Earthlink assigned to resolve password issues, reported
151341 -        on 100908 1230, ref SDS 20 WP8K, and cited in the record on
151342 -        100908 1230. ref SDS 20 N66I...]
151343 -
151344 -            [...below letter today on 100912 0628 at 1320 asks again
151345 -            for assistance using My Account. ref SDS 0 LA6M
151347 -             ..
151348 -            [On 100913 1411 received response from Anna with
151349 -            clarification on accessing My Account for welchco.com,
151350 -            needed to change ftp password; this resolves all pending
151351 -            issues, including case #155315240. ref SDS 22 EF6J
151352 -
151362 -
151363 -
151364 -
151366 -  ..
1514 -
1515 -
1516 - 1123
1517 -
151701 - Sent another letter to Anna at Earthlink...
151702 -
151703 -    1.  Subject: My Account Access Procedures Earthlink Problem #155315240
151704 -        Date: Fri, 10 Sep 2010 14:11:36 -0400
151711 -         ..
151712 -    2.  Follow up to the report on 100908, that, thanks to you,
151713 -        Earthlink solved problem # 155308001 which eliminated Google's
151714 -        "Report Attack Page" on my website, welchco.com, ref SDS 20
151715 -        KD5I, and cited in letter to Earthlink on 100910 1313.
151716 -        ref SDS 21 GA4O...]  Earthlink also solved part of problem #
151717 -        155315240 by activating my new ftp password. [...reported on
151718 -        100910 1313. ref SDS 21 KD5I, citing the record on 100908 1230.
151719 -        ref SDS 20 4S4Y...] ...]
151721 -         ..
151722 -    3.  I still need help on how to access "My Account" which is part
151723 -        the 2nd problem #155315240, reported on 100908. ref SDS 20 N66I
151724 -        ...[and was requested in the letter to Anna, earlier this
151725 -        morning on 100912 0628, per above. ref SDS 0 5U9Q...]
151727 -         ..
151728 -    4.  Can you or a colleague please let me know the precise entries
151729 -        required to use "My Account" service.  I can then enter it in
151730 -        the SDS record so it is available to change my ftp password on
151731 -        a regular basis without calling Earthlink.
151732 -
151733 -            [...below Anna responded with partial procedures.
151734 -            ref SDS 21 0T4X
151736 -             ..
151737 -            [On 100913 1411 received response from Anna with
151738 -            clarification on accessing My Account for welchco.com,
151739 -            needed to change ftp password; this resolves all pending
151740 -            issues, including case #155315240. ref SDS 22 EF6J
151741 -
151747 -
151748 -
151750 -  ..
1518 -
1519 -
1520 - 1734
1521 -
152101 - Received letter from Anna at Earthlink saying...
152102 -
152103 -    1.  Subject: Re: My Account Access Procedures Earthlink Problem #155315240
152104 -        Date: Fri, 10 Sep 2010 19:10:00 -0400 (EDT)
152108 -         ..
152109 -    2.  Hi,
152111 -         ..
152112 -        To change your password [...responding to letter earlier today,
152113 -        on 100910 1313, and shown above, ref SDS 21 LA6M...] on the
152114 -        MyAccount page:
152116 -             ..
152117 -        1.  Log in to: https://myaccount.earthlink.net
152119 -             ..
152120 -        2.  Click on the link below the page that says "
152121 -            Webhosting/ParkedDomain"
152123 -             ..
152124 -        3.  Type in your domain name and your password.
152126 -             ..
152127 -        4.  Once you are logged in, you will see there a link "Change
152128 -            Admin Password"
152130 -             ..
152131 -        5.  From here you can now change your password.
152132 -
152133 -               [On 100913 1411 received response from Anna with
152134 -               clarification on accessing My Account for welchco.com,
152135 -               needed to change ftp password; this resolves all pending
152136 -               issues, including case #155315240. ref SDS 22 EF6J
152137 -
152140 -
152141 -
152142 -
152143 -
152144 -
152145 -
152146 -
152147 -
152148 -
152149 -
152150 -
1522 -