Okay, maybe this isn't strictly an Emailer question, but since we use Emailer...
We keep getting email that begins as shown below. It's very long, like it is an encoded .wav file, as "Content-Type: audio/x-wav;" would suggest. Is this another variant of the various worms/viruses/whathaveyou that plague users of M$ software? Oddly enough, these emails all come to a customer service address which isn't published. It's only used as a return address when someone contacts us through an online form. (The address was published online some years ago.) Like other miscreant email it comes with different subject lines, many of which read as if they are legitimate. Examples include: "broken links," "frame spacing," "some questions," "Window.open(url," Our business, econweb.com, involves college-level education and the addresses given in the "From" field often appear to be legit, often from .edu domains, but a look at the long header shows that they all include: Received: from c000.snv.cp.net (h007.c000.snv.cp.net [209.228.32.xx]) where the .xx is the only part of that IP that changes cp.net seems to be a service provider who I will contact, but I would like to know what's going on before I contact them, in the hope that I'll actually get some assistance, so I'm hoping someone on this list is familiar with this sort of email. I can't decide if this is just random mischief, something else, or someone really hoping to bring us down but who thinks we use Windows computers (as if!! :) Any insight would be very helpful. Thanks! John Here is how the emails begins.... --Z8X7NwQ0x666hiv Content-Type: text/html; Content-Transfer-Encoding: quoted-printable <HTML><HEAD></HEAD><BODY> <iframe src=3Dcid:R4OR7U0k70E333248 height=3D0 width=3D0> </iframe> <FONT></FONT></BODY></HTML> --Z8X7NwQ0x666hiv Content-Type: audio/x-wav; name=COORDS.bat Content-Transfer-Encoding: base64 Content-ID: <R4OR7U0k70E333248> ___________________________________________________________________________ To unsubscribe send a mail message with a SUBJECT line of "unsubscribe" to <[EMAIL PROTECTED]> or <[EMAIL PROTECTED]>
