View Single Post
Old 07-19-2001, 09:19 PM  
Midnight
Confirmed User
 
Midnight's Avatar
 
Join Date: Jun 2001
Location: ONLINE
Posts: 330
Warning - email replication trojan

I received emails from three separate people on this, containing the following content

~~~
Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks
~~~

The files sent are in .bat format, and are word documents that contain .vs or visual basic script. I can only assume these are virii.

The emails are sent from the following sources:

Return-Path: <[email protected]>
Received: from slate.Mines.EDU ([138.67.1.38]) by mail.oakweb.com
(Post.Office MTA v3.5.3 release 223 ID# 0-71787U7500L750S0V35)
with ESMTP id com for <[email protected]>;
Thu, 19 Jul 2001 12:12:21 -0700
Received: from MP127_StuHousing.mines.edu (MP127-StuHousing.Mines.EDU [138.67.74.127])
by slate.Mines.EDU (AIX4.3/8.9.3/8.9.1) with SMTP id NAA56430
for <[email protected]>; Thu, 19 Jul 2001 13:15:44 -0600
Message-Id: <[email protected]>
From: "Shekhar Jayanth"<[email protected]>
To: [email protected]
Subject: TABLES-APICS-PROPOSAL
date: Thu, 19 Jul 2001 13:15:05 -0600
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----794D6707_Outlook_Express_message_boundary"
Content-Disposition: Multipart message


Return-Path: <[email protected]>
Received: from smtprelay3.abs.adelphia.net ([64.8.20.11])
by mail.oakweb.com (Post.Office MTA v3.5.3 release 223
ID# 0-71787U7500L750S0V35) with ESMTP id com
for <[email protected]>; Thu, 19 Jul 2001 16:41:49 -0700
Received: from bozoresearch.home ([24.48.241.66]) by
smtprelay3.abs.adelphia.net (Netscape Messaging Server 4.15)
with SMTP id GGQV9O02.EH8 for <[email protected]>; Thu,
19 Jul 2001 19:44:12 -0400
From: "Evan Flynn"<[email protected]>
To: [email protected]
Subject: 040101
date: Thu, 19 Jul 2001 19:43:43 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed; boundary="----158AB994_Outlook_Express_message_boundary"
Content-Disposition: Multipart message


Please use caution if you encounter such an email.

Regards,



------------------
Midnight
Midnight Ventures Partner Program
Excellence is not an act, but a habit - Aristotle
Midnight is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote