You know, I got an odd piece of mail a while ago, which seemed to be
a virus report from my server, and I trashed it because it claimed
that it was sent by me at 4:30 that morning, but searching my
computer showed no trace of any activity at that time, period. I
concluded that it was a clever t
At 11:41 PM +0200 6/10/03, Johannes Gebauer wrote:
On 10.06.2003 20:27 Uhr, Daniel Dorff wrote
You know, this email address:
[EMAIL PROTECTED]
is definitely not one of mine. I never had a yahoo account, ever.
BTW, just to be sure I searched for the file you mentioned, it does not
exist on any o
On 10.06.2003 20:27 Uhr, Daniel Dorff wrote
You know, this email address:
> [EMAIL PROTECTED]
is definitely not one of mine. I never had a yahoo account, ever.
BTW, just to be sure I searched for the file you mentioned, it does not
exist on any of my partitions.
I think I can be pretty sure th
On 10 Jun 2003 at 14:27, Daniel Dorff wrote:
> Received: from r8a9t9 (h68-147-108-117.cg.shawcable.net [68.147.108.117])
> by l-daemon (iPlanet Messaging Server 5.2 HotFix 1.14 (built Mar 18
> 2003)) with SMTP id <[EMAIL PROTECTED]> for [EMAIL PROTECTED];
> Tue, 10 Jun 2003 09:34:07 -0600 (MDT)
I just went back to see the bugbear attack email,
and here's the header and source code:
I'm not sure how to interpret the headers, but for
sure, the infected computer has a file called hughesdisckiheishoresa102.pdf
since that's what the virus was able to choose for its .scr payload.
Anyon
