BoatBanter.com

BoatBanter.com (https://www.boatbanter.com/)
-   ASA (https://www.boatbanter.com/asa/)
-   -   Hey Wally (https://www.boatbanter.com/asa/26758-hey-wally.html)

John Cairns January 1st 05 10:00 PM

Hey Wally
 
Received a virus via e-mail from "your" address. Of course, if you sent it
it's probably infected your computer and you might be having problems as I
type this.


John Cairns



Wally January 1st 05 10:15 PM

John Cairns wrote:

Received a virus via e-mail from "your" address. Of course, if you
sent it it's probably infected your computer and you might be having
problems as I type this.


If you mean the cedar_bucket address, then I certainly didn't send anything
from that - it's a hotmail spam bucket which I never actually use. Being a
purely online, web-based account, there's no reference to it in my mail
software here.

That said, I'm curious - could you post the full headers for me? Or email
them to tonal (at) blueyonder (dot) co (dot) uk.


--
Wally
www.artbywally.com
www.wally.myby.co.uk



John Cairns January 1st 05 10:36 PM

2 Attachment(s)

"Wally" wrote in message
...
John Cairns wrote:

Received a virus via e-mail from "your" address. Of course, if you
sent it it's probably infected your computer and you might be having
problems as I type this.


If you mean the cedar_bucket address, then I certainly didn't send
anything
from that - it's a hotmail spam bucket which I never actually use. Being a
purely online, web-based account, there's no reference to it in my mail
software here.

That said, I'm curious - could you post the full headers for me? Or email
them to tonal (at) blueyonder (dot) co (dot) uk.


--
Wally
www.artbywally.com
www.wally.myby.co.uk



X-Apparently-To: via 66.163.170.98; Thu,
30 Dec 2004 02:38:26 -0800
X-YahooFilteredBulk: 84.98.81.4
Authentication-Results: mta825.mail.sc5.yahoo.com from=hotmail.com;
domainkeys=neutral (no sig)
X-Originating-IP: [84.98.81.4]
Return-Path:
Received: from 207.115.57.33 (EHLO ylpvm02.prodigy.net)
(207.115.57.33) by mta825.mail.sc5.yahoo.com with SMTP; Thu, 30 Dec 2004
02:38:26 -0800
X-Header-Overseas: Mail.from.Overseas.source.84.98.81.4
X-Header-NoReverseIP: IP.name.lookup.failed[84.98.81.4]
X-Originating-IP: [84.98.81.4]
Received: from sbcglobal.net ([84.98.81.4]) by ylpvm02.prodigy.net
(8.12.10 083104/8.12.10) with ESMTP id iBUAcQXE014393 for
; Thu, 30 Dec 2004 05:38:27 -0500
Message-Id:
From:
Add to Address Book
To: nospam

Subject: its me
Date: Mon, 1 Jan 2001 00:05:42 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0002_00007527.000065BE"
X-Priority: 3
X-MSMail-Priority: Normal
Content-Length: 24941







John Cairns January 1st 05 10:42 PM


"Wally" wrote in message
...
John Cairns wrote:

Received a virus via e-mail from "your" address. Of course, if you
sent it it's probably infected your computer and you might be having
problems as I type this.


If you mean the cedar_bucket address, then I certainly didn't send
anything
from that - it's a hotmail spam bucket which I never actually use. Being a
purely online, web-based account, there's no reference to it in my mail
software here.

That said, I'm curious - could you post the full headers for me? Or email
them to tonal (at) blueyonder (dot) co (dot) uk.


--
Wally
www.artbywally.com
www.wally.myby.co.uk



I would add, it's no big deal, all of my "bulk" mail gets forwarded to
yahoo, never gets in my Outlook inbox, even if it did, I would never open an
unsolicited e-mail attachment, even if it was from an addy I recognized.
Can't help thinking that someone from the ng mailed this. Wonder if they
realize it's a federal crime?

John Cairns




Wally January 1st 05 11:25 PM

John Cairns wrote:

I would add, it's no big deal, all of my "bulk" mail gets forwarded to
yahoo, never gets in my Outlook inbox, even if it did, I would never
open an unsolicited e-mail attachment, even if it was from an addy I
recognized. Can't help thinking that someone from the ng mailed this.
Wonder if they realize it's a federal crime?


It could be that someone else has a virus which harvested the address from
one of my posts.

Had a look at the headers - the given IP addresses have nothing to do with
me. A tracert on the apparent originating IP (for which there is no reverse
lookup) gave a penultimate hop of something called kaptech.net, and a whois
on that indicates that it's registered in France. That would be consistent
with the +0100 timestamp.

Nuffink to do wiv me, guv'nor! :-)


--
Wally
www.artbywally.com
www.wally.myby.co.uk



Steve Thomas January 2nd 05 10:42 PM

We had the "my doom" email virus at work a few months back. It is one that
will send out emails that look they come from any address it finds on a host
machine. I still get notices from our exchange server from time to time,
although the virus itself gets filtered out by the coorporate system. It
would seem that it can lurk on unprotected desktops for a long time.

"Wally" wrote in message
...
John Cairns wrote:

I would add, it's no big deal, all of my "bulk" mail gets forwarded to
yahoo, never gets in my Outlook inbox, even if it did, I would never
open an unsolicited e-mail attachment, even if it was from an addy I
recognized. Can't help thinking that someone from the ng mailed this.
Wonder if they realize it's a federal crime?


It could be that someone else has a virus which harvested the address from
one of my posts.

Had a look at the headers - the given IP addresses have nothing to do with
me. A tracert on the apparent originating IP (for which there is no

reverse
lookup) gave a penultimate hop of something called kaptech.net, and a

whois
on that indicates that it's registered in France. That would be consistent
with the +0100 timestamp.

Nuffink to do wiv me, guv'nor! :-)


--
Wally
www.artbywally.com
www.wally.myby.co.uk






All times are GMT +1. The time now is 10:20 AM.

Powered by vBulletin® Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.
Copyright ©2004 - 2014 BoatBanter.com