Text 14069, 122 rader
Skriven 2006-11-17 16:35:50 av Rich Gauszka (1:379/45)
  Kommentar till text 14068 av Gary Britt (1:379/45)
Ärende: Re: NLS.NET Is Spamming Me With A Trojan/Worm????
=========================================================
From: "Rich Gauszka" <gauszka@dontspamhotmail.com>

Uh Oh - are you a close personal friend of Osama bin Laden?

"Gary Britt" <glbNOSPAM@gencogDOTcom.com> wrote in message
news:455e2b73@w3.nls.net...
> Its some pakistani spoofing the nls.net domain as the return address:
>
> The messages are received from 203.101.174.122 and the info on this ip
> address I get is:
>
> C:\Utility > whosip 203.101.174.122
>
> WHOIS Source: APNIC
> IP Address:   203.101.174.122
> Country:      Pakistan
> Network Name: CYBERNET
> Owner Name:   CYBER INTERNET SERVICES (PVT.) LTD.
> From IP:      203.101.160.0
> To IP:        203.101.191.255
> Allocated:    Yes
> Contact Name: ANSARUL HAQ
> Address:      A-904, 9TH FLOOR LAKSON SQUARE BUILDING#3, SARWAR SHAHEED
> ROAD, KARACH
> I-74200 PAKISTAN
> Email:        eng@cyber.net.pk
> Abuse Email:
> Phone:        +092-021-568-1752
> Fax:          +092-021-568-2711
>
> Gary
>
> Rich Gauszka wrote:
>> Yeah - a accidentally replied to all on one of the messages I got from an
>> ex-coworker and obviously hit some infected machines. My spams on another
>> email account have dramatically increased.
>>
>>
>> "Gary Britt" <glbNOSPAM@gencogDOTcom.com> wrote in message
>> news:455e1890$1@w3.nls.net...
>>> ;), I didn't think that was one of *his* sheep!!!
>>>
>>> I've gotten 6 more since the last update.  I'm setting up a virus filter
>>> at my mail server to block nls.net messages for the time being.
>>>
>>> Avast is definitely showing it was worth the price I paid for it today!
>>>
>>> Maybe some spammer is spoofing the nls.net part of the address?
>>>
>>> Funny though that these all come from georger@nls.net.  Amazing what the
>>> bot computers can pickup and figure out.
>>>
>>> Gary
>>>
>>> Rich Gauszka wrote:
>>>> I'm not getting anything. You didn't mess with any of Geo's sheep did
>>>> you? <g>
>>>>
>>>>
>>>> "Gary Britt" <glbNOSPAM@gencogDOTcom.com> wrote in message
>>>> news:455e0c42$1@w3.nls.net...
>>>>> I've gotten 6 more since 1:00 PM ET.  I hope some bot/worm isn't
>>>>> spamming all of nls.net with this worm.
>>>>>
>>>>> Thanks,
>>>>>
>>>>> Gary
>>>>>
>>>>> Gary Britt wrote:
>>>>>> Hey George,
>>>>>>
>>>>>> Are you testing my thunderbird email program for exploits??
>>>>>>
>>>>>> This morning I received 21 email messages all from Georger@nls.net
>>>>>> and all infected with various photos containing the Win32:VB-CD2
>>>>>> [Wrm].
>>>>>>
>>>>>> Avast zapped them all as they came in, but I had to sit there and
>>>>>> click delete twice for each one of them so Avast could clean the
>>>>>> infected photos from the emails.
>>>>>>
>>>>>> Here is a sample of what Avast was reporting:
>>>>>>
>>>>>> Incoming email 'Fw: Funny :)' From: "georger" <georger@nls.net>, To:
>>>>>> <g l b AT g e n c o g . c o m>\Video_part.mim#1999582787
>>>>>>
>>>>>> Incoming email 'Re: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>>>
>>>>>> Incoming email 'Re: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Attachments[001].B64#483803162
>>>>>>
>>>>>> Incoming email 'Fw: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Video_part.mim#1999582787
>>>>>>
>>>>>> Incoming email 'Fwd: image.jpg' From: "georger" <georger@nls.net>,
>>>>>> To: <g l b AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>>>
>>>>>> Incoming email 'Fw: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Attachments00.HQX#1805444652
>>>>>>
>>>>>> Incoming email 'Fw: Sexy' From: "georger" <georger@nls.net>, To: <g l
>>>>>> b AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>>>
>>>>>> Incoming email 'Re: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Attachments00.HQX#1805444652
>>>>>>
>>>>>> Incoming email 'Fw: SeX.mpg' From: "georger" <georger@nls.net>, To:
>>>>>> <g l b AT g e n c o g . c o m>\SeX.mim#3194668624
>>>>>>
>>>>>> Incoming email 'Fw: ' From: "georger" <georger@nls.net>, To: <g l b
>>>>>> AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>>>
>>>>>> Incoming email 'Fwd: Crazy illegal Sex!' From: "georger"
>>>>>> <georger@nls.net>, To: <g l b AT g e n c o g . c o
>>>>>> m>\Sex.mim#2779844178
>>>>>>
>>>>>> Gary
>>

--- BBBS/NT v4.01 Flag-5
 * Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)