Results 1 to 12 of 12
  1. #1

    Possible Virus from WHT

    Hey

    Just thought I'd mention that I got an email from WHT today that most likely contains a virus.

    Email from: [email protected]

    Return-path: <[email protected]>
    Envelope-to: [email protected]
    Delivery-date: Sun, 18 Apr 2004 18:17:29 -0400
    Received: from [69.170.14.86] (helo=vbdesk.com)
    by spirit.premierservers.com with esmtp (Exim 4.24)
    id 1BFKbQ-0005Ug-TH
    for [email protected]; Sun, 18 Apr 2004 18:17:28 -0400
    From: [email protected]
    To: [email protected]
    Subject: Re: Mail Authentification
    Date: Sun, 18 Apr 2004 18:17:37 -0400
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
    X-Priority: 3
    X-MSMail-Priority: Normal
    Message-Id: <[email protected]>

    This is a multi-part message in MIME format.

    ------=_NextPart_000_0016----=_NextPart_000_0016
    Content-Type: text/plain;
    charset="Windows-1252"
    Content-Transfer-Encoding: 7bit


    First part of the secure mail is available.



    ------=_NextPart_000_0016----=_NextPart_000_0016
    Content-Type: application/octet-stream;
    name="msg.zip"
    Content-Transfer-Encoding: base64
    Content-Disposition: attachment;
    filename="msg.zip"


    Regards,
    Chris

  2. #2
    Join Date
    Jul 2003
    Location
    Nothing but, net
    Posts
    2,062
    It is just a spoofed from address.

  3. #3
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,858
    by spirit.premierservers.com with esmtp (Exim 4.24)

    last i remember the wht mail server is panther#.webhostingtalk.com



    [edit]

    [email protected][~]:$ host webhostingtalk.com
    webhostingtalk.com has address 69.20.37.114
    webhostingtalk.com mail is handled (pri=10) by mail.inetinteractive.com

    spirit.premierservers.com has address 198.87.84.181
    mail.inetinteractive.com has address 69.20.37.64
    Last edited by ub3r; 04-18-2004 at 06:35 PM.

  4. #4
    Join Date
    Dec 2002
    Location
    The Shadows
    Posts
    2,913
    I think ub3r needs a cookie for his investigative work...
    Dan Sheppard ~ Freelance whatever

  5. #5
    Join Date
    Jan 2003
    Location
    Let's see.....
    Posts
    4,446
    The other day I got an spoofed email with a virus from an ex-employee who's been gone for 6 months and the email addy it came from is no longer valid.
    73's, Kim
    Everything happens for a reason I make up.

  6. #6
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,858
    I think ub3r needs a cookie for his investigative work...
    just leave 3 oreos by my pillow.

  7. #7
    Join Date
    Jul 2003
    Posts
    191
    now virus has more and more ways to disguise

  8. #8
    Join Date
    Dec 2002
    Location
    chica go go
    Posts
    11,858
    now virus has more and more ways to disguise
    i think the way it works is that it scans a bunch of websites for email addresses, then when it finds an email address on that website it will disguise itself to look as if it has been sent from the website where that user's email address was found.

  9. #9
    your correct ub3r.
    John Heslop

  10. #10
    I was looking for an explanation of this... I run an online message board (forum) that is hosted by my host and my members have been asking me why I'm sending them spam and/or viruses... at least now I can give them an answer..., however, I have a question... *also, good thing I didn't take it out on my host; decided to research here first*

    What is spoofing and how does it work exactly? (just so I fill myself with knowledge to answer the concerns correctly)

    Thanks,

    Jenn.

  11. #11
    Join Date
    Dec 2002
    Location
    NY, NY
    Posts
    3,975
    When you write an email..
    you can put whatever you want in the "from" field ..
    You cant do it using yahoo, or the like,
    but a script is easily written in any language.

  12. #12
    Thanks! I figured that was what it was...

    Jenn.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •