「朱72」　shu72.com » e-mail http://shu72.com the personal website of Sonya C. Wheeler Tue, 20 Mar 2012 06:02:39 +0000 en hourly 1 Computer zombies with a viral load in e-mails http://shu72.com/2004/06/25/computer-zombies-with-a-viral-load-in-emails/ http://shu72.com/2004/06/25/computer-zombies-with-a-viral-load-in-emails/#comments Fri, 25 Jun 2004 13:30:51 +0000 Sonya http://shu72.com/2004/06/25/computer-zombies-with-a-viral-load-in-emails/ Well, I’m still getting zombiefied emails from France that have attachments with them. I guess it looks like that guy who emailed me last year got his computer hijacked recently. When he emailed me last year his email client must have saved me in his address book (A feature which can be turned off). Once his system got infected and turned into a zombie everyone including me is now getting the emails with the attachments.

15 more between the 18th of June till now. All with the “wanadoo.fr” in the headers. Someone on there is infected and it sends itself to people with different “sender” emails. I’ve got 3 different “senders” so far. The IP numbers are different for the most part but the numbers belong to the same block… “wanadoo.fr”, as in the headers.

I started to keep a little OpenOffice spreadsheet on the attachment names, dates, IP info, subject titles, and sizes of the zombie emails I’m getting (mainly because it finally gives me a reason to start learning the ins-and-outs of OpenOffice). Plus, I figured it wouldn’t be wise to bounce the emails since that might cause more trouble in cyberspace so it’s…

delete, delete, delete!

]]> http://shu72.com/2004/06/25/computer-zombies-with-a-viral-load-in-emails/feed/ 0 Rampant email viruses http://shu72.com/2004/06/17/rampant-email-viruses/ http://shu72.com/2004/06/17/rampant-email-viruses/#comments Fri, 18 Jun 2004 02:01:52 +0000 Sonya http://shu72.com/2004/06/17/rampant-email-viruses/ There has been a strangely increasing amount of spam with virus attachments sent to my email. I’ve gotten more of these emails within the last few days than I’ve ever got before. 2 additional yesterday and 2 more just today. They didn’t effect or infect me.

This time attachments with file the names:

  • Manufacture.zlv
  • Alive_condom.com
  • Counter_strike.vbs
  • bateaqxiqy.jpeg
  • Message.zip

The last two were sent together, how nice. Taking a closer look at the email headers (The same French header info as the emails I talked about a few days ago on the 15th.) and the common sender name this time, I realized this joker has emailed me before (Re: Past entry titled “Dig this…” from 28 October 03). I can’t really tell if this actual person deliberately sent these to me or not but it’s getting annoying. Luckily my email program has now trained itself to automatically mark it as junk mail.

Of course the recent four were sent with a “latinmail.com” email suffix. A popular spammer domain.

]]> http://shu72.com/2004/06/17/rampant-email-viruses/feed/ 0 What the…? Spoofing and phishing. http://shu72.com/2004/06/15/what-the-spoofing-and-phishing/ http://shu72.com/2004/06/15/what-the-spoofing-and-phishing/#comments Tue, 15 Jun 2004 21:40:46 +0000 Sonya http://shu72.com/2004/06/15/what-the-spoofing-and-phishing/ I got a few funny emails recently. Too funny for words and an obvious attempt at forging, spoofing and phishing! Here’s one:

Hello user of Eklectik.com e-mail server,

Your e-mail account has been temporary disabled because of unauthorized access.

For more information see the attached file.

Kind regards,
  The Eklectik.com team        http://www.eklectik.com

Ha! The Eklectik.com team?! Gee, what a minute, That’s me! Funny I don’t remember doing any “unauthorized access” on my account and sending myself and email to that affect preventing me from accessing my own email. Bad me. For shame! Go figure.

An attached file you say? Obvious ploy to get me to open an attachment in an email from a sender who is unknown—but in the case of the one from The Eklectik.com team, well there is no “The Eklectik.com team” Thank You, but no. Try again.

Who ever this asshole is (whether human or machine) they sent me some other emails too but with the sender email address changed. Apparently with a different attachment with them with names like: MoreInfo.pif, Toy.com, the_message.com and Info.scr. All of which to me spell out trouble (i.e. virus, trojan, phishing).

Some of the emails didn’t even have any regular plain text in the body of the message. Except one that only stated “I love you answer me please” and gave a website address. My sarcastic answer: “Oh, O.K. Uuh, I think it’s time we started seeing other people. Really, it’s been great, but I feel we’ve grown distant. We can still be friends alright?” I really didn’t respond to the email.

Most likely a phishing scam on that one. From the headers I think I’ve narrowed it down to it being supposedly sent from a French domain and an IP based in the Netherlands (Amsterdam).

]]> http://shu72.com/2004/06/15/what-the-spoofing-and-phishing/feed/ 0