Page 1 of 2 12 LastLast
Results 1 to 16 of 17

Thread: list@hexus virus spam

  1. 20-08-2003, 12:31 PM #1
    Swafe
    Swafe is offline
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts

    Red face list@hexus virus spam

    Got this last night

    From :
    <list@hexus.net>

    To :
    <swafeman@hotmail.com>

    Subject :
    Re: Wicked screensaver

    Date :
    Tue, 19 Aug 2003 16:28:08 +0100

    Attachment : your_details.pif (99k)
    Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version

    Please see the attached file for details.






    from list@hexus.net, looks like a virus to me
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK     now updated
    Reply With Quote Reply With Quote
  2. 20-08-2003, 12:38 PM #2
    CocoPops
    CocoPops is offline
    Missing in Action CocoPops's Avatar
    Join Date
    Jul 2003
    Location
    Thatcham, UK
    Posts
    2,672
    Thanks
    3
    Thanked
    6 times in 5 posts
    I'm fairly confident to say that the email address has been spoofed.

    Please post the header details to confirm this.
    Reply With Quote Reply With Quote
  3. 20-08-2003, 12:38 PM #3
    Gordy
    Gordy is offline
    Gordy Gordy's Avatar
    Join Date
    Jul 2003
    Location
    Bristol
    Posts
    3,805
    Thanks
    63
    Thanked
    72 times in 50 posts
    Smells of spoof header to me

    www.gordyhand.co.uk
    Reply With Quote Reply With Quote
  4. 20-08-2003, 01:22 PM #4
    s1lv3r
    s1lv3r is offline
    Member
    Join Date
    Jul 2003
    Posts
    93
    Thanks
    2
    Thanked
    0 times in 0 posts
    definately spoofed.. it's the sobig-f virus varient: http://www.sophos.com/virusinfo/analyses/w32sobigf.html
    ------------------------------------
    information is not a property of matter, it's applied to matter by intelligence
    Reply With Quote Reply With Quote
  5. 20-08-2003, 01:46 PM #5
    Rory
    Rory is offline
    Senior Member
    Join Date
    Jul 2003
    Posts
    220
    Thanks
    0
    Thanked
    0 times in 0 posts
    Damn I can't believe David has been sending viruses out again
    Signature is 57 % complete. Please check back later.
    Reply With Quote Reply With Quote
  6. 20-08-2003, 02:45 PM #6
    pmk24
    pmk24 is offline
    cs nub
    Join Date
    Jul 2003
    Location
    Stoke-on-Trent
    Posts
    242
    Thanks
    0
    Thanked
    0 times in 0 posts
    [evil bloke of scooby doo voice]his plan to take over the internet will never happen if u damb kids dont go away ! [/evil bloke of scooby doo voice]
    Reply With Quote Reply With Quote
  7. 20-08-2003, 03:07 PM #7
    Swafe
    Swafe is offline
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    i deleted it, but ill get the header if its still in the trash can
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK     now updated
    Reply With Quote Reply With Quote
  8. 20-08-2003, 03:12 PM #8
    Swafe
    Swafe is offline
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    MIME-Version: 1.0
    Received: from LUKE ([81.128.147.227]) by mc7-f37.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Tue, 19 Aug 2003 08:27:49 -0700
    X-Message-Info: 6sSXyD95QpWgCBWUvHx8NNdDCbTE47+p
    X-MailScanner: Found to be clean
    Importance: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    X-MSMail-Priority: Normal
    X-Priority: 3 (Normal)
    Return-Path: list@hexus.net
    Message-ID: <MC7-F37vx0O1ET2zF5t0014b4ee@mc7-f37.law1.hotmail.com>
    X-OriginalArrivalTime: 19 Aug 2003 15:27:50.0447 (UTC) FILETIME=[7359D3F0:01C36666]
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK     now updated
    Reply With Quote Reply With Quote
  9. 20-08-2003, 03:16 PM #9
    CocoPops
    CocoPops is offline
    Missing in Action CocoPops's Avatar
    Join Date
    Jul 2003
    Location
    Thatcham, UK
    Posts
    2,672
    Thanks
    3
    Thanked
    6 times in 5 posts
    Received: from LUKE ([81.128.147.227]) by mc7-f37.law1.hotmail.com

    That IP is nothing to do with Hexus, or even vaguely related to it as far as I know.
    Reply With Quote Reply With Quote
  10. 20-08-2003, 03:27 PM #10
    acidrainy
    acidrainy is offline
    You are feeling sleepy... acidrainy's Avatar
    Join Date
    Jul 2003
    Location
    Glasgow
    Posts
    1,518
    Thanks
    4
    Thanked
    2 times in 2 posts
    http://securityresponse.symantec.com...obig.f@mm.html

    looks like that's your bug :/
    Reply With Quote Reply With Quote
  11. 20-08-2003, 03:30 PM #11
    Agent
    Agent is offline
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,185
    Thanks
    738
    Thanked
    1,609 times in 1,048 posts
    % This is the RIPE Whois server.
    % The objects are in RPSL format.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/ripencc/pub-serv...copyright.html

    inetnum: 81.128.126.0 - 81.128.251.255
    remarks: *******************************************************
    remarks: * Please send abuse reports to abuse@btopenworld.com *
    remarks: *******************************************************
    netname: BT-ADSL
    descr: IP Pools
    country: GB
    admin-c: IT337-RIPE
    tech-c: DY128-RIPE
    status: ASSIGNED PA
    mnt-by: BTNET-MNT
    mnt-lower: BTNET-MNT
    mnt-routes: BTNET-MNT
    changed: preston.dialip@bt.com 20030620
    source: RIPE

    route: 81.128.0.0/11
    descr: BT Public Internet Service
    origin: AS2856
    mnt-by: BTNET-MNT
    changed: support@bt.net 20030615
    source: RIPE

    person: Iain Teven
    remarks: ******************************************************
    remarks: * Please send abuse reports to abuse@btopenworld.com *
    remarks: ******************************************************
    address: PP WST 1
    address: William Smith House
    address: Business Park
    address: Thurso
    address: Caithness
    address: KW14 7XW
    address: UK
    phone: +44 1847 895857
    e-mail: abuse@btopenworld.com
    nic-hdl: IT337-RIPE
    mnt-by: BTNET-MNT
    changed: preston.dialip@bt.com 20030522
    changed: preston.dialip@bt.com 20030522
    source: RIPE

    person: Dennis Young
    remarks: System admin only
    remarks: Please send abuse reports to abuse@btopenworld.com
    address: B81 Room 102/14
    address: Callisto House
    address: BT Adastral Park
    address: Martlesham Heath
    address: Ipswich
    address: Suffolk
    address: IP5 3RE
    address: UK
    phone: +44 1473 645701
    e-mail: ims.adastral@btopenworld.com
    nic-hdl: DY128-RIPE
    mnt-by: BTNET-MNT
    changed: preston.dialip@bt.com 20010404
    changed: preston.dialip@bt.com 20011213
    changed: preston.dialip@bt.com 20020515
    changed: preston.dialip@bt.com 20030306
    source: RIPE


    Its a BT openworld IP by the looks of it, probably a customer infected with the virus and has the email address in his addy book, and the virus chose it on random to spoof and send to other users.
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.
    Reply With Quote Reply With Quote
  12. 20-08-2003, 03:36 PM #12
    Swafe
    Swafe is offline
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    why spoof hexus tho
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK     now updated
    Reply With Quote Reply With Quote
  13. 20-08-2003, 05:20 PM #13
    THCi
    THCi is offline
    Ive got 10/40w for blood... THCi's Avatar
    Join Date
    Jul 2003
    Location
    Somewhere, sometime, dunno why though.
    Posts
    512
    Thanks
    0
    Thanked
    0 times in 0 posts
    Originally posted by Agent
    the virus chose it on random to spoof and send to other users.
    Why ask such questions?
    My Bike! Me + Shiny new Bike =
    Reply With Quote Reply With Quote
  14. 20-08-2003, 07:04 PM #14
    joshwa
    joshwa is offline
    Senior Member joshwa's Avatar
    Join Date
    Jul 2003
    Location
    Sheffield, UK
    Posts
    4,856
    Thanks
    132
    Thanked
    67 times in 62 posts
    • joshwa's system
      • Motherboard:
      • PC Chips M577 AT/ATX
      • CPU:
      • AMD K6-2 500Mhz
      • Memory:
      • 128mb PC100 SDRAM
      • Storage:
      • 8GB Fujitsu
      • Graphics card(s):
      • 3dfx Voodoo 3 3000 AGP (16mb)
      • PSU:
      • ATX 500watt
      • Case:
      • Midi Tower AT
      • Operating System:
      • Windows 98 SE
      • Monitor(s):
      • 22" TFT Widescreen
    Originally posted by Swafeman
    why spoof hexus tho
    most of these viruses just seem to pick email addresses to use at random from the address book.
    Join the HEXUS Folding at Home Team!!
    Welcome to HEXUS! - Read this if you're new!
    hexus trust | joshwaller.co.uk | tea review
    Reply With Quote Reply With Quote
  15. 21-08-2003, 12:16 AM #15
    Agent
    Agent is offline
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,185
    Thanks
    738
    Thanked
    1,609 times in 1,048 posts
    Originally posted by THCi
    Why ask such questions?
    What question ?
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.
    Reply With Quote Reply With Quote
  16. 21-08-2003, 05:17 AM #16
    acidrainy
    acidrainy is offline
    You are feeling sleepy... acidrainy's Avatar
    Join Date
    Jul 2003
    Location
    Glasgow
    Posts
    1,518
    Thanks
    4
    Thanked
    2 times in 2 posts
    Originally posted by Agent
    What question ?
    I think he used your quote to answer Swafeman's question
    Originally posted by Swafeman
    why spoof hexus tho
    Reply With Quote Reply With Quote
Page 1 of 2 12 LastLast
« Previous Thread | Next Thread »

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules