iplural
Monday, May 10, 2004 by XX | Discussion: WinCustomize Talk
Hey I don't know why but I keep on getting emails from you, all with viruses. Apperently the source of all those emails is from hc_studio.com via delta.pxnetwork.com.
(helo=hc_studio.com)
by delta.pxnetwork.com with smtp (Exim 4.24)
(helo=hc_studio.com)
by delta.pxnetwork.com with smtp (Exim 4.24)
Sugaree
Reply #2 Monday, May 10, 2004 1:03 AM
Reply #2 Monday, May 10, 2004 1:03 AM
Rolf, It's not Iplural...It's just the latest virii going round >
yrag
Reply #3 Monday, May 10, 2004 1:31 AM
....IP lives........
Reply #3 Monday, May 10, 2004 1:31 AM
| #68 by IPlural - 5/9/2004 11:20:49 AM Sheesh, It was the Chili, so excuse me already.IPlural turns back to spraying Flower Scented Lysol around office. |
....IP lives........
XX
Reply #4 Monday, May 10, 2004 1:33 AM
Reply #4 Monday, May 10, 2004 1:33 AM
Yeah I was pretty sure its that, chinacat.
It's suddenly much more common to see virus warnings nowdays, normally I never see those ever.
It's suddenly much more common to see virus warnings nowdays, normally I never see those ever.
IPlural
Reply #5 Monday, May 10, 2004 1:43 AM
Reply #5 Monday, May 10, 2004 1:43 AM
now that would be a tirck considering we've never conversed via email 
I'll check with the server and see whats happening on that end, though it is probably my hosting service was raped by a spyder...
If I can put a stop to it I will.
The other odd thing is that I do not email anyone from that account except three people and they haven't had any problems.
btw: I don't get WORM's or Virus problems, least of all attacking my address book...
I'll check with the server and see whats happening on that end, though it is probably my hosting service was raped by a spyder...
If I can put a stop to it I will.
The other odd thing is that I do not email anyone from that account except three people and they haven't had any problems.
btw: I don't get WORM's or Virus problems, least of all attacking my address book...
IPlural
Reply #6 Monday, May 10, 2004 2:05 AM
Reply #6 Monday, May 10, 2004 2:05 AM
Date: Sun, 09 May 2004 10:36:03 +0100
From: Rolf
To: Iplural
Subject: RE: Message Notify
Part(s): 1 unnamed text/html 0.10 KB
2 acueygeyzb.gif image/gif 1.38 KB
3 You_are_dismissed.zip application/octet-stream 29.59 KB
-
Rolf did you send this to me at 10:36 this morning?
From: Rolf
To: Iplural
Subject: RE: Message Notify
Part(s): 1 unnamed text/html 0.10 KB
2 acueygeyzb.gif image/gif 1.38 KB
3 You_are_dismissed.zip application/octet-stream 29.59 KB
-
Rolf did you send this to me at 10:36 this morning?
IPlural
Reply #7 Monday, May 10, 2004 2:16 AM
Reply #7 Monday, May 10, 2004 2:16 AM
Subject: RE: Message Notify < that is the common MSN-Messenger email alert if I am thinking correctly...
XX
Reply #8 Monday, May 10, 2004 2:03 PM
Reply #8 Monday, May 10, 2004 2:03 PM
Hmm no. Last email I sent were 3 days ago.
*edit*
Received: from [80.55.235.222] (helo=hc_studio.net)
by delta.pxnetwork.com with smtp (Exim 4.24)
That is same for all the returned emails. I think that server got borked. Either 2 servers anyway.
[Message Edited]
*edit*
Received: from [80.55.235.222] (helo=hc_studio.net)
by delta.pxnetwork.com with smtp (Exim 4.24)
That is same for all the returned emails. I think that server got borked. Either 2 servers anyway.
[Message Edited]
IPlural
Reply #9 Monday, May 10, 2004 4:21 PM
Reply #9 Monday, May 10, 2004 4:21 PM
ack, yeah, has me wondering if a spyder hasn't picked up the emails on the site for a spam list.
going to change mine to something different and see what happens over the next month.
going to change mine to something different and see what happens over the next month.
IPlural
Reply #10 Tuesday, May 11, 2004 4:00 PM
Reply #10 Tuesday, May 11, 2004 4:00 PM
Return-path: Rolf-at-removedfor sanities sake.net
Envelope-to: iplural-a-wackybobo.com
Delivery-date: Sun, 09 May 2004 03:35:40 -0500
Received: from 80.55.235.222 helo=hc_studio.org
by delta.pxnetwork.com with smtp Exim 4.24
id 1BMjmY-0001gH-9
for iplural-at-wackybobo.com Sun, 09 May 2004 03:35:34 -0500
Date: Sun, 09 May 2004 10:36:03 +0100
To: "Iplural" iplural-at-wackybobo.com
From: "Rolf" Rolf-at-removed again.net
Subject: RE: Message Notify
Message-ID: wkmsdzvzrlfpyukoewn-at-wackybobo.com
MIME-Version: 1.0
Content-Type: multipart/mixed
boundary="ijjedlowkhxpohummqpf"
Status: O
X-Status:
X-Keywords:
X-UID: 5
X-NAS-Bayes: #0: 0.79379 #1: 0.20621
X-NAS-Classification: 0
X-NAS-MessageID: 340
X-NAS-Validation: 48BC27F7-EED9-47F1-9E6F-D07D1504CB75
-
changing email upon posting this to see what takes place over time with such spam crap...
I am betting it is a Site Spider data-mining email addresses to build dbf''''s for spambots.
[Message Edited]
[Message Edited]
Envelope-to: iplural-a-wackybobo.com
Delivery-date: Sun, 09 May 2004 03:35:40 -0500
Received: from 80.55.235.222 helo=hc_studio.org
by delta.pxnetwork.com with smtp Exim 4.24
id 1BMjmY-0001gH-9
for iplural-at-wackybobo.com Sun, 09 May 2004 03:35:34 -0500
Date: Sun, 09 May 2004 10:36:03 +0100
To: "Iplural" iplural-at-wackybobo.com
From: "Rolf" Rolf-at-removed again.net
Subject: RE: Message Notify
Message-ID: wkmsdzvzrlfpyukoewn-at-wackybobo.com
MIME-Version: 1.0
Content-Type: multipart/mixed
boundary="ijjedlowkhxpohummqpf"
Status: O
X-Status:
X-Keywords:
X-UID: 5
X-NAS-Bayes: #0: 0.79379 #1: 0.20621
X-NAS-Classification: 0
X-NAS-MessageID: 340
X-NAS-Validation: 48BC27F7-EED9-47F1-9E6F-D07D1504CB75
-
changing email upon posting this to see what takes place over time with such spam crap...
I am betting it is a Site Spider data-mining email addresses to build dbf''''s for spambots.
[Message Edited]
[Message Edited]
XX
Reply #11 Tuesday, May 11, 2004 8:59 PM
Reply #11 Tuesday, May 11, 2004 8:59 PM
Odd. delta.pxnetwork.com is some Cpanel thingy site, and hc_studio.org is nonexistant, but IP address points to an another site.
Shameless Designs
Reply #12 Tuesday, May 11, 2004 11:19 PM
Reply #12 Tuesday, May 11, 2004 11:19 PM
Hi guys, I received an e-mail apparently from webgizmos, with whom I have never before corresponded, and caught some similar information in the header. Thought I would post it here in case you are interested.
X-Apparently-To: shamelessdesigns @yahoo.com via 216.136.232.73 Sun, 09 May 2004 01:40:12 -0700
Return-Path: webgizmos @msn.com
Received: from 80.55.235.222 (HELO hcstudio.net) (80.55.235.222) by mta115.mail.scd.yahoo.com with SMTP Sun, 09 May 2004 01:39:56 -0700
Date: Sun, 09 May 2004 10:40:28 +0100
To: "Shamelessdesigns"
From: "Webgizmos" Add to Address Book
Subject: Forum notify
Message-ID: pkdtnowhwcjvdkydnyd @yahoo.com
MIME-Version: 1.0
Content-Type: multipart/mixed boundary="opkkmpokxgjjzluoufpa"
Content-Length: 24256
The message contained two attachments, both containing virii. Since both webgizmos and I have these email addresses posted in our profiles here, it appears to me that some type of spyder is crawling the site looking for addresses.
BTW, webgizmos, if you read this, I have no doubt that you did not send the email to me.
[Message Edited]
[Message Edited]
X-Apparently-To: shamelessdesigns @yahoo.com via 216.136.232.73 Sun, 09 May 2004 01:40:12 -0700
Return-Path: webgizmos @msn.com
Received: from 80.55.235.222 (HELO hcstudio.net) (80.55.235.222) by mta115.mail.scd.yahoo.com with SMTP Sun, 09 May 2004 01:39:56 -0700
Date: Sun, 09 May 2004 10:40:28 +0100
To: "Shamelessdesigns"
From: "Webgizmos" Add to Address Book
Subject: Forum notify
Message-ID: pkdtnowhwcjvdkydnyd @yahoo.com
MIME-Version: 1.0
Content-Type: multipart/mixed boundary="opkkmpokxgjjzluoufpa"
Content-Length: 24256
The message contained two attachments, both containing virii. Since both webgizmos and I have these email addresses posted in our profiles here, it appears to me that some type of spyder is crawling the site looking for addresses.
BTW, webgizmos, if you read this, I have no doubt that you did not send the email to me.
[Message Edited]
[Message Edited]
UpsideDownGC
Reply #13 Tuesday, May 11, 2004 11:21 PM
Reply #13 Tuesday, May 11, 2004 11:21 PM
I think the WC emails did get spidered. I got one legit email at design HatH joe doug * com but over 100 spam a day. It really sucks.
IPlural
Reply #15 Tuesday, May 11, 2004 11:31 PM
Reply #15 Tuesday, May 11, 2004 11:31 PM
mmm, I'll go ahead and keep the email addy active and run email-tracker to the source and visual route on the source, the info compiled could be used to go against those doing it and tracking them down possibly...
Shameless Designs
Reply #16 Tuesday, May 11, 2004 11:35 PM
Reply #16 Tuesday, May 11, 2004 11:35 PM
I forwarded the email I received to Security @ yahoo for them to trace, though I don't really expect to ever hear from them again. That would be my idea of one of the ultimate thankless jobs. All they ever get are complaints and rarely if ever any recognition or gratitude.
That would be my idea of one of the ultimate thankless jobs. All they ever get are complaints and rarely if ever any recognition or gratitude.Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
Reply #1 Monday, May 10, 2004 12:58 AM