Rolf, It's not Iplural...It's just the latest virii going round >

Yeah I was pretty sure its that, chinacat.

It's suddenly much more common to see virus warnings nowdays, normally I never see those ever.

Date: Sun, 09 May 2004 10:36:03 +0100
From: Rolf
To: Iplural
Subject: RE: Message Notify
Part(s): 1 unnamed text/html 0.10 KB
2 acueygeyzb.gif image/gif 1.38 KB
3 You_are_dismissed.zip application/octet-stream 29.59 KB

-

Rolf did you send this to me at 10:36 this morning?

Hmm no. Last email I sent were 3 days ago.

*edit*
Received: from [80.55.235.222] (helo=hc_studio.net)
by delta.pxnetwork.com with smtp (Exim 4.24)

That is same for all the returned emails. I think that server got borked. Either 2 servers anyway.
[Message Edited]

Return-path: Rolf-at-removedfor sanities sake.net
Envelope-to: iplural-a-wackybobo.com
Delivery-date: Sun, 09 May 2004 03:35:40 -0500
Received: from 80.55.235.222 helo=hc_studio.org
by delta.pxnetwork.com with smtp Exim 4.24
id 1BMjmY-0001gH-9
for iplural-at-wackybobo.com Sun, 09 May 2004 03:35:34 -0500
Date: Sun, 09 May 2004 10:36:03 +0100
To: "Iplural" iplural-at-wackybobo.com
From: "Rolf" Rolf-at-removed again.net
Subject: RE: Message Notify
Message-ID: wkmsdzvzrlfpyukoewn-at-wackybobo.com
MIME-Version: 1.0
Content-Type: multipart/mixed
boundary="ijjedlowkhxpohummqpf"
Status: O
X-Status:
X-Keywords:
X-UID: 5
X-NAS-Bayes: #0: 0.79379 #1: 0.20621
X-NAS-Classification: 0
X-NAS-MessageID: 340
X-NAS-Validation: 48BC27F7-EED9-47F1-9E6F-D07D1504CB75
-

changing email upon posting this to see what takes place over time with such spam crap...


I am betting it is a Site Spider data-mining email addresses to build dbf''''s for spambots.

[Message Edited]
[Message Edited]

Hi guys, I received an e-mail apparently from webgizmos, with whom I have never before corresponded, and caught some similar information in the header. Thought I would post it here in case you are interested.

X-Apparently-To: shamelessdesigns @yahoo.com via 216.136.232.73 Sun, 09 May 2004 01:40:12 -0700
Return-Path: webgizmos @msn.com
Received: from 80.55.235.222 (HELO hcstudio.net) (80.55.235.222) by mta115.mail.scd.yahoo.com with SMTP Sun, 09 May 2004 01:39:56 -0700
Date: Sun, 09 May 2004 10:40:28 +0100
To: "Shamelessdesigns"
From: "Webgizmos" Add to Address Book
Subject: Forum notify
Message-ID: pkdtnowhwcjvdkydnyd @yahoo.com
MIME-Version: 1.0
Content-Type: multipart/mixed boundary="opkkmpokxgjjzluoufpa"
Content-Length: 24256


The message contained two attachments, both containing virii. Since both webgizmos and I have these email addresses posted in our profiles here, it appears to me that some type of spyder is crawling the site looking for addresses.

BTW, webgizmos, if you read this, I have no doubt that you did not send the email to me.


[Message Edited]
[Message Edited]

ouch

I forwarded the email I received to Security @ yahoo for them to trace, though I don't really expect to ever hear from them again. That would be my idea of one of the ultimate thankless jobs. All they ever get are complaints and rarely if ever any recognition or gratitude.