Re: mimail infection (was Re: [MSX] MSX Resource Center available in Spanish)

2003-10-20 Thread Benoît Delvaux 
Here you can find a very useful tool to trace the way on Internet of
messages with strange or faked addresses :

http://www.samspade.org/ssw/

Benoît "Le Martien" -
http://www.marsupone.com
http://www.marsupone.com/msxvalley
http://msx-xpress.fixato.nl/

___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx

Re: mimail infection (was Re: [MSX] MSX Resource Center available in Spanish)

2003-10-20 Thread Jorge Vidal Wulff 
ooops
"knows"
Patriek Lesparre wrote:

Laurens Holst wrote:

Patriek Lesparre wrote:
> On a sidenote, someone in this list appears to be infected with the
> Mimail worm. See
>
http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] 

I didn't get anything, but, can't you easily see the source IP in the
message header? If you have that you can reverse dns it / compare it 
with
ip's of people on this list (ok that might be a bit of a hassle ;p).


Good idea, forgot about that ^^;
Here it is: as6-m132.net.hinet.hr [195.29.101.132]
___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx
.

___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx

Re: mimail infection (was Re: [MSX] MSX Resource Center available in Spanish)

2003-10-20 Thread Jorge Vidal Wulff 
Remember that maybe the virus can fake the IP (not likely, but who nows...)
bye!
Patriek Lesparre wrote:

Laurens Holst wrote:

Patriek Lesparre wrote:
> On a sidenote, someone in this list appears to be infected with the
> Mimail worm. See
>
http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] 

I didn't get anything, but, can't you easily see the source IP in the
message header? If you have that you can reverse dns it / compare it 
with
ip's of people on this list (ok that might be a bit of a hassle ;p).


Good idea, forgot about that ^^;
Here it is: as6-m132.net.hinet.hr [195.29.101.132]
___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx
.

___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx

mimail infection (was Re: [MSX] MSX Resource Center available in Spanish)

2003-10-20 Thread Patriek Lesparre 
Laurens Holst wrote:
Patriek Lesparre wrote:
> On a sidenote, someone in this list appears to be infected with the
> Mimail worm. See
>
http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
I didn't get anything, but, can't you easily see the source IP in the
message header? If you have that you can reverse dns it / compare it with
ip's of people on this list (ok that might be a bit of a hassle ;p).
Good idea, forgot about that ^^;
Here it is: as6-m132.net.hinet.hr [195.29.101.132]
___
MSX mailing list ([EMAIL PROTECTED])
Info page: http://lists.stack.nl/mailman/listinfo/msx