Re: What can be done about malicious emails with viruses?
From: Bryan Henderson (bhendersonNOSPAM@freenet.co.uk)
Date: 04/17/03
- Next message: Colonel Flagg: "Re: What can be done about malicious emails with viruses?"
- Previous message: Doug: "What can be done about malicious emails with viruses?"
- In reply to: Doug: "What can be done about malicious emails with viruses?"
- Next in thread: foo@foo.foo: "Re: What can be done about malicious emails with viruses?"
- Reply: foo@foo.foo: "Re: What can be done about malicious emails with viruses?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Bryan Henderson" <bhendersonNOSPAM@freenet.co.uk> Date: Thu, 17 Apr 2003 18:47:12 +0100
"Doug" <None@nowhere.net> wrote in message
news:b7mjcs0140m@enews2.newsguy.com...
> I have come to believe that someone is intentionally sending viruses to me
> via email. Since Monday, I've received five viruses. Is there any way I
can
> track this creep down and report him to his ISP?
>
> I tried replying to him once, and got an 'undeliverable' message. This
could
> be because he is simply bounced my email, but is it possible that he
emailed
> me with a bogus address?
>
> Here is what I get when I click 'properties' on his email... (Note that I
> removed my own address, and replaced it with asterisks).
>
> _______________________________________________________________
>
> X-Symantec-TimeoutProtection: 0
> X-Symantec-TimeoutProtection: 1
> X-Symantec-TimeoutProtection: 2
> X-Symantec-TimeoutProtection: 3
> X-Symantec-TimeoutProtection: 4
> X-Symantec-TimeoutProtection: 5
> Return-Path: <kjk@eol.ca>
> Received: from mail.eol.ca (mail.echo-on.net [205.189.151.1])
> by e450.mnsi.net (8.12.9/8.12.9) with ESMTP id h3HFVJdJ013869
> for <*****************> Thu, 17 Apr 2003 11:31:20 -0400 (EDT)
> Received: from Zrtjmkwbg (ppp-RAS1-4-121.dialup.eol.ca [64.56.227.121])
> by mail.eol.ca (Postfix) with SMTP id 697AE93F9
> for <*****************>; Thu, 17 Apr 2003 11:38:16 -0400 (EDT)
> From: ackilpatrick <ackilpatrick@sympatico.ca>
> To: ******************
> Subject: A funny game
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> boundary=Ezt53HHPWSm10R0I2fV64D5v45s91IM
> Message-Id: <20030417153816.697AE93F9@mail.eol.ca>
> Date: Thu, 17 Apr 2003 11:38:16 -0400 (EDT)
> X-UIDL: ;2e"!CL+#!L^^!!<1)#!
>
> --Ezt53HHPWSm10R0I2fV64D5v45s91IM
> Content-Type: text/html;
> Content-Transfer-Encoding: quoted-printable
>
> <HTML><HEAD></HEAD><BODY>
>
> <FONT>This is a funny game<br>
> This game is my first work.<br>
> You're the first player.<br>
> I hope you would enjoy it.</FONT></BODY></HTML>
>
> --Ezt53HHPWSm10R0I2fV64D5v45s91IM
> Content-Type: plain/text;
> name="Norton AntiVirus Deleted1.txt"
> Content-Transfer-Encoding: base64
> Content-ID: <Sj7xF85Xlt7Z609>
>
> _______________________________________________________________
>
> You'll notice that this email seems to be coming from two different
> locations... 'sympatico.ca' and 'eol.ca'. Is this normal? Which - if any -
> is correct?
>
> Is there any way of tracking this guy down from the above email header?
>
> And suggestions woudl be greatly appreciated.
>
In the last few months I have been getting an email with virus attached
virtually every day and have had the same funny game one you mention I
think.
I posted something on the newsgroup alt.comp.virus on 30th March 2003 and
someone contacted me with a view to helping me find out where these were
coming from etc. This person doesn't want their email address or name given
out on Usenet in case the same thing starts happening to them however you
could try posting your story on that newsgroup or if you e-mail me your
address I will forward it to him.
I spoke to my ISP to see if they knew where this stuff comes from but I
believe it isn't easy to find out.
- Next message: Colonel Flagg: "Re: What can be done about malicious emails with viruses?"
- Previous message: Doug: "What can be done about malicious emails with viruses?"
- In reply to: Doug: "What can be done about malicious emails with viruses?"
- Next in thread: foo@foo.foo: "Re: What can be done about malicious emails with viruses?"
- Reply: foo@foo.foo: "Re: What can be done about malicious emails with viruses?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|