UK Mobile Phones (uk.telecom.mobile) Mobile telephone equipment and networks.

Reply
 
LinkBack Thread Tools Display Modes
  #3   Report Post  
Old April 4th 04, 11:33 PM posted to uk.telecom.mobile
external usenet poster
 
First recorded activity by MobileBanter: Jul 2003
Posts: 693
Default john rymer

is he in your address book ?


--
E-Mail Addy obet(ng)qfy(qbg)cvcrk(qbg)pbz <---Rot13 it
watch out for spam trap in header

http://www.davessite.co.uk
Trike Power the TRUE Trinity
  #5   Report Post  
Old April 6th 04, 07:00 PM posted to uk.telecom.mobile
external usenet poster
 
First recorded activity by MobileBanter: Apr 2004
Posts: 9
Default john rymer


"Jon S Green" wrote in message
...
"Andy" . uk wrote:

hi john just to let you know i think you may have a virus, got an email

from
remove spamfree to get real address


Almost all worms these days forge the "From:" address to be something
from the sender's address book, or elsewhere on the machine. About the
one thing you can be reasonably sure of is that wherever it came from,
it wasn't John's machine.

The clue comes in the "Received:" headers. One of them will have a
forged domain name attached to a correct sender reverse-lookup (in other
words, it contradicts itself, with the name against the dotted-quad
(1.2.3.4) address being the correct one). If this explanation's
baffling, you might ask your nearest guru to show you how this works.


Jon
--
SPAM BLOCK IN USE! Replace 'deadspam' with 'green-lines' to reply in

email.
Want a free solution to email spam? Try
http://www.deadspam.com/
(Declaration of interest: I own/run the domain.)





here is message souce with transcript of original message

Return-Path:
Delivered-To:

Received: (qmail 60159 invoked from network); 4 Apr 2004 19:54:33 -0000
Received: from unknown (HELO ptb-mxcore03.plus.net) (212.159.14.217)
by ptb-mailstore04.plus.net with SMTP; 4 Apr 2004 19:54:33 -0000
Received: from asnet01-3-025.aus.texas.net ([207.170.90.25] helo=trey.net)
by ptb-mxcore03.plus.net with smtp (Exim) id 1BADh9-000LqA-Dn
for
; Sun, 04 Apr 2004 20:54:15
+0100
Date: Sun, 04 Apr 2004 14:57:17 -0600
To:

Subject: Hi
From:

Message-ID:
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------rnupdjhhthqnwjivfwvx"


----------rnupdjhhthqnwjivfwvx
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html<body
Read the attach.<br<br

<br
</body</html

----------rnupdjhhthqnwjivfwvx
Content-Type: application/octet-stream; name="Message.pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Message.pif"

IA==

----------rnupdjhhthqnwjivfwvx
Content-type: text/plain; charset=iso-8859-1
Content-Disposition: attachment;filename=McAfee_EmailScanReport.txt
Content-Transfer-Encoding: quoted-printable


****************** McAfee VirusScan ************************
******* Alert generated at: Sun, 04 Apr 2004 21:17:05 +0000 *********
************************************************** *******************

McAfee VirusScan has detected a potential threat in this e-mail=20
sent by
.(added to prevent spam to john

The following actions were attempted on each suspicious part.=20
We strongly recommend that you report this virus-related activity=20
to
.


The attachment "Message.pif" is infected with the W32/[email protected] Virus(e=
s).=20
This attachment has been cleaned.



----------rnupdjhhthqnwjivfwvx--





  #6   Report Post  
Old April 6th 04, 07:00 PM posted to uk.telecom.mobile
external usenet poster
 
First recorded activity by MobileBanter: Apr 2004
Posts: 9
Default john rymer


"Jon S Green" wrote in message
...
"Andy" . uk wrote:

hi john just to let you know i think you may have a virus, got an email

from
remove spamfree to get real address


Almost all worms these days forge the "From:" address to be something
from the sender's address book, or elsewhere on the machine. About the
one thing you can be reasonably sure of is that wherever it came from,
it wasn't John's machine.

The clue comes in the "Received:" headers. One of them will have a
forged domain name attached to a correct sender reverse-lookup (in other
words, it contradicts itself, with the name against the dotted-quad
(1.2.3.4) address being the correct one). If this explanation's
baffling, you might ask your nearest guru to show you how this works.


Jon
--
SPAM BLOCK IN USE! Replace 'deadspam' with 'green-lines' to reply in

email.
Want a free solution to email spam? Try
http://www.deadspam.com/
(Declaration of interest: I own/run the domain.)





here is message souce with transcript of original message

Return-Path:
Delivered-To:

Received: (qmail 60159 invoked from network); 4 Apr 2004 19:54:33 -0000
Received: from unknown (HELO ptb-mxcore03.plus.net) (212.159.14.217)
by ptb-mailstore04.plus.net with SMTP; 4 Apr 2004 19:54:33 -0000
Received: from asnet01-3-025.aus.texas.net ([207.170.90.25] helo=trey.net)
by ptb-mxcore03.plus.net with smtp (Exim) id 1BADh9-000LqA-Dn
for
; Sun, 04 Apr 2004 20:54:15
+0100
Date: Sun, 04 Apr 2004 14:57:17 -0600
To:

Subject: Hi
From:

Message-ID:
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------rnupdjhhthqnwjivfwvx"


----------rnupdjhhthqnwjivfwvx
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit

<html<body
Read the attach.<br<br

<br
</body</html

----------rnupdjhhthqnwjivfwvx
Content-Type: application/octet-stream; name="Message.pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Message.pif"

IA==

----------rnupdjhhthqnwjivfwvx
Content-type: text/plain; charset=iso-8859-1
Content-Disposition: attachment;filename=McAfee_EmailScanReport.txt
Content-Transfer-Encoding: quoted-printable


****************** McAfee VirusScan ************************
******* Alert generated at: Sun, 04 Apr 2004 21:17:05 +0000 *********
************************************************** *******************

McAfee VirusScan has detected a potential threat in this e-mail=20
sent by
.(added to prevent spam to john

The following actions were attempted on each suspicious part.=20
We strongly recommend that you report this virus-related activity=20
to
.


The attachment "Message.pif" is infected with the W32/[email protected] Virus(e=
s).=20
This attachment has been cleaned.



----------rnupdjhhthqnwjivfwvx--





Reply
Thread Tools
Display Modes

Posting Rules

Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
John-Unlocking shop - K700i :-\) UK Mobile Phones 17 January 19th 12 03:55 AM
John Murphy Reestit Mutton UK Mobile Phones 2 November 17th 04 09:16 PM
attn: John Phillips The Crow UK Mobile Phones 7 November 7th 04 03:16 PM
Is John Murphey lost on the allotment OT Stephen (Sausagefans.com) UK Mobile Phones 6 August 18th 04 06:31 AM
John Murphey OT Stephen (Sausagefans.com) UK Mobile Phones 6 July 1st 04 09:24 AM


All times are GMT. The time now is 01:34 AM.

Powered by vBulletin® Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.
Copyright 2004-2021 Mobile Banter.
The comments are property of their posters.
 

About Us

"It's about UK mobile phones"

 

Copyright © 2017