Re: Worrisome email

Subject: Re: Worrisome email
From: "Gary S. Callison" <huey -at- interaccess -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Tue, 15 Apr 2003 17:12:03 -0500 (CDT)



On Tue, 15 Apr 2003, GXR -at- ddpmi -dot- com ("Gary Robinson") wrote:
> Our system security people are reporting that the email penetrated our
> system because the attachment isn't intact and therefore, not viral.
> As far as I can tell, only members of this list have been targeted. At
> least, no one on HATT and TechComm has reported receiving these emails.

The internet is a very big place. Some of the headers of the messages
I've seen appear to have been scraped from usenet, others could be from
anywhere. <http://vil.nai.com/vil/content/v_100088.htm> has more details.

In the last three weeks, I have received one or more copies of this from
the following:

Received: from RohOYDf (60.34.35.65.cfl.rr.com [65.35.34.60])
Received: from ipzegvou (12-231-189-229.client.attbi.com[12.231.189.229])
Received: from atzjGh ([80.5.65.225])
(pc2-midd2-4-cust225.midd.cable.ntl.com)
Received: from eliza (200-158-68-242.dsl.telesp.net.br [200.158.68.242])
Received: from JWViI (D5769C1F.kabel.telenet.be [213.118.156.31])
Received: from YDtFXji ([142.173.11.161])
(bnhe169cy427e.bc.hsia.telus.net)
Received: from unknown (HELO WS12) (934309 -at- [62 -dot- 226 -dot- 252 -dot- 149])
(p3ee2fc95.dip.t-dialin.net)
Received: from z3n1o2 (h24-83-232-47.va.shawcable.net [24.83.232.47])
Received: from setjoa ([81.84.111.155]) (unresolved, TVCABO Autonomous
System Lisboa)

If you see your own IP address there, your computer is infected with the
gibe worm. And please stop mailing these to me, as the microsoft security
update doesn't help me much on solaris 2.5 regardless of whether it's
legit or not. K TNX LOL BYE.

--
Huey


^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Purchase RoboHelp X3 in April and receive a $100 mail-in
rebate, plus FREE RoboScreenCapture and WebHelp Merge Module.
Order here: http://www.ehelp.com/techwr-l/


Help celebrate TECHWR-L's 10th Anniversary starting this month!
Check out the contests at http://www.raycomm.com/techwhirl/special/contests/
Happy birthday to you, happy birthday to you, happy birthday TECHWR-L....

---
You are currently subscribed to techwr-l as:
archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



Previous by Author: RE: Visual SourceSafe/other doc control apps
Next by Author: Re: new blood
Previous by Thread: Re: Worrisome email
Next by Thread: Re: Worrisome email


What this post helpful? Share it with friends and colleagues:


Sponsored Ads