Hi Peter,

>I see.
>I've heard of similar things happening before. I just hope whoever it's
>coming from will sort it out soon.

The chances are they don't even know they are doing it and as these posts that we are 
seeing are via a List we don't even know who is doing it as the original email headers 
have been stripped off.

We see squillions of these every day, its a serious pain, and a cost :-(

Here is a line from a bounce message I got back today from a mail server somewhere:
..............
Received: from mbcomms.net.au (dsl-210-15-204-246.NSW.netspace.net.au [210.15.204.246])
..............

Now if you peek at our address range it is not hard to discover that our mail server's 
territory is 202.129.130.nnn, we are certainly not a DSL connection via netspace! :-)

 From that we know that whoever has a broadband connection that has an IP address of 
246.204.15.210 is either a crook (unlikely) or has an infected machine (very likely).


>Peter Mount
>[EMAIL PROTECTED]
>
>-----Original Message-----
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED] Behalf Of Ayudh
>Nagara
>Sent: Friday, 1 October 2004 22:25
>To: CFAussie Mailing List
>Subject: [cfaussie] Re: Hello
>
>
>I received this email borne virus too and I would have thought it's
>pretty clear by now what's happening, but from this exchange maybe not.
>I think that if Taco's responsible for spreading the virus he wouldn't
>be dumb enough to identify himself. Some third party is infected who has
>both Taco and cfaussie in his address book (could be any of us reading
>this!). The worm sends out emails using random entries from the address
>book as FROM and TO addresses. Unfortunately for Taco, the worm seems to
>have a predilection for picking his address :-)
>
>Peter Mount wrote:
>> Hi
>>
>> I checked the attachment ("Alive_condom.com") in Vet. It has
>> "Win32.Bagle.X worm"
>>
>> Peter Mount
>> [EMAIL PROTECTED]
>>
>>     -----Original Message-----
>>     *From:* [EMAIL PROTECTED]
>>     [mailto:[EMAIL PROTECTED] Behalf Of *Taco
>>     Fleur
>>     *Sent:* Friday, 1 October 2004 21:53
>>     *To:* CFAussie Mailing List
>>     *Subject:* [cfaussie] Re: Hello
>>
>>     What? Are you serious? How did that happen?
>>
>>
>>     *Taco Fleur*
>>
>>     Tell me and I will forget
>>     Show me and I will remember
>>     Teach me and I will learn
>>
>>         -----Original Message-----
>>         *From:* [EMAIL PROTECTED]
>>         [mailto:[EMAIL PROTECTED] *On Behalf Of
>>         *Peter Mount
>>         *Sent:* Friday, 1 October 2004 9:01 PM
>>         *To:* CFAussie Mailing List
>>         *Subject:* [cfaussie] Re: Hello
>>
>>         Hi
>>
>>         I just got a virus alert on an attachment to this email.
>>
>>         Peter Mount
>>         [EMAIL PROTECTED]
>>
>>             -----Original Message-----
>>             *From:* [EMAIL PROTECTED]
>>             [mailto:[EMAIL PROTECTED] Behalf
>>             Of *Taco.fleur
>>             *Sent:* Friday, 1 October 2004 7:18
>>             *To:* CFAussie Mailing List
>>             *Subject:* [cfaussie] Re: Hello
>>
>>
>>         ---
>>         You are currently subscribed to cfaussie as:
>[EMAIL PROTECTED]
>>         To unsubscribe send a blank email to
>>         [EMAIL PROTECTED] Aussie Macromedia
>>         Developers: http://lists.daemon.com.au/
>>
>>     ---
>>     You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
>>     To unsubscribe send a blank email to
>>     [EMAIL PROTECTED] Aussie Macromedia
>>     Developers: http://lists.daemon.com.au/
>>
>> ---
>> You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
>> To unsubscribe send a blank email to
>> [EMAIL PROTECTED] Aussie Macromedia Developers:
>> http://lists.daemon.com.au/
>
>--
>Regards: Ayudh
>
>+----------------------------------------------------------------+
>| SOAP is the glue! Hook up your server directly to your bank.   |
>| Connect to VeriPay xServ, the Australian Payments Web Service. |
>| Reliable, Secure, FAST: http://www.xilo.com/xserv              |
>+----------------------------------------------------------------+
>
>
>---
>You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
>To unsubscribe send a blank email to
>[EMAIL PROTECTED]
>Aussie Macromedia Developers: http://lists.daemon.com.au/
>
>
>---
>You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
>To unsubscribe send a blank email to [EMAIL PROTECTED]
>Aussie Macromedia Developers: http://lists.daemon.com.au/

--

Yours,

Kym 


---
You are currently subscribed to cfaussie as: [EMAIL PROTECTED]
To unsubscribe send a blank email to [EMAIL PROTECTED]
Aussie Macromedia Developers: http://lists.daemon.com.au/

Reply via email to