Page 1 of 2 12 LastLast
Results 1 to 16 of 17

Thread: list@hexus virus spam

  1. #1
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts

    Red face list@hexus virus spam

    Got this last night

    From :
    <list@hexus.net>

    To :
    <swafeman@hotmail.com>

    Subject :
    Re: Wicked screensaver

    Date :
    Tue, 19 Aug 2003 16:28:08 +0100

    Attachment : your_details.pif (99k)
    Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version

    Please see the attached file for details.






    from list@hexus.net, looks like a virus to me
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK
    now updated

  2. #2
    Missing in Action CocoPops's Avatar
    Join Date
    Jul 2003
    Location
    Thatcham, UK
    Posts
    2,672
    Thanks
    3
    Thanked
    6 times in 5 posts
    I'm fairly confident to say that the email address has been spoofed.

    Please post the header details to confirm this.

  3. #3
    Gordy Gordy's Avatar
    Join Date
    Jul 2003
    Location
    Bristol
    Posts
    3,804
    Thanks
    63
    Thanked
    71 times in 49 posts
    Smells of spoof header to me

  4. #4
    Member
    Join Date
    Jul 2003
    Posts
    88
    Thanks
    0
    Thanked
    0 times in 0 posts
    definately spoofed.. it's the sobig-f virus varient: http://www.sophos.com/virusinfo/analyses/w32sobigf.html
    ------------------------------------
    information is not a property of matter, it's applied to matter by intelligence

  5. #5
    Senior Member
    Join Date
    Jul 2003
    Posts
    220
    Thanks
    0
    Thanked
    0 times in 0 posts
    Damn I can't believe David has been sending viruses out again
    Signature is 57 % complete. Please check back later.

  6. #6
    cs nub
    Join Date
    Jul 2003
    Location
    Stoke-on-Trent
    Posts
    242
    Thanks
    0
    Thanked
    0 times in 0 posts
    [evil bloke of scooby doo voice]his plan to take over the internet will never happen if u damb kids dont go away ! [/evil bloke of scooby doo voice]

  7. #7
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    i deleted it, but ill get the header if its still in the trash can
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK
    now updated

  8. #8
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    MIME-Version: 1.0
    Received: from LUKE ([81.128.147.227]) by mc7-f37.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Tue, 19 Aug 2003 08:27:49 -0700
    X-Message-Info: 6sSXyD95QpWgCBWUvHx8NNdDCbTE47+p
    X-MailScanner: Found to be clean
    Importance: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    X-MSMail-Priority: Normal
    X-Priority: 3 (Normal)
    Return-Path: list@hexus.net
    Message-ID: <MC7-F37vx0O1ET2zF5t0014b4ee@mc7-f37.law1.hotmail.com>
    X-OriginalArrivalTime: 19 Aug 2003 15:27:50.0447 (UTC) FILETIME=[7359D3F0:01C36666]
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK
    now updated

  9. #9
    Missing in Action CocoPops's Avatar
    Join Date
    Jul 2003
    Location
    Thatcham, UK
    Posts
    2,672
    Thanks
    3
    Thanked
    6 times in 5 posts
    Received: from LUKE ([81.128.147.227]) by mc7-f37.law1.hotmail.com

    That IP is nothing to do with Hexus, or even vaguely related to it as far as I know.

  10. #10
    You are feeling sleepy... acidrainy's Avatar
    Join Date
    Jul 2003
    Location
    Glasgow
    Posts
    1,518
    Thanks
    4
    Thanked
    2 times in 2 posts

  11. #11
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,158
    Thanks
    732
    Thanked
    1,604 times in 1,043 posts
    % This is the RIPE Whois server.
    % The objects are in RPSL format.
    %
    % Rights restricted by copyright.
    % See http://www.ripe.net/ripencc/pub-serv...copyright.html

    inetnum: 81.128.126.0 - 81.128.251.255
    remarks: *******************************************************
    remarks: * Please send abuse reports to abuse@btopenworld.com *
    remarks: *******************************************************
    netname: BT-ADSL
    descr: IP Pools
    country: GB
    admin-c: IT337-RIPE
    tech-c: DY128-RIPE
    status: ASSIGNED PA
    mnt-by: BTNET-MNT
    mnt-lower: BTNET-MNT
    mnt-routes: BTNET-MNT
    changed: preston.dialip@bt.com 20030620
    source: RIPE

    route: 81.128.0.0/11
    descr: BT Public Internet Service
    origin: AS2856
    mnt-by: BTNET-MNT
    changed: support@bt.net 20030615
    source: RIPE

    person: Iain Teven
    remarks: ******************************************************
    remarks: * Please send abuse reports to abuse@btopenworld.com *
    remarks: ******************************************************
    address: PP WST 1
    address: William Smith House
    address: Business Park
    address: Thurso
    address: Caithness
    address: KW14 7XW
    address: UK
    phone: +44 1847 895857
    e-mail: abuse@btopenworld.com
    nic-hdl: IT337-RIPE
    mnt-by: BTNET-MNT
    changed: preston.dialip@bt.com 20030522
    changed: preston.dialip@bt.com 20030522
    source: RIPE

    person: Dennis Young
    remarks: System admin only
    remarks: Please send abuse reports to abuse@btopenworld.com
    address: B81 Room 102/14
    address: Callisto House
    address: BT Adastral Park
    address: Martlesham Heath
    address: Ipswich
    address: Suffolk
    address: IP5 3RE
    address: UK
    phone: +44 1473 645701
    e-mail: ims.adastral@btopenworld.com
    nic-hdl: DY128-RIPE
    mnt-by: BTNET-MNT
    changed: preston.dialip@bt.com 20010404
    changed: preston.dialip@bt.com 20011213
    changed: preston.dialip@bt.com 20020515
    changed: preston.dialip@bt.com 20030306
    source: RIPE


    Its a BT openworld IP by the looks of it, probably a customer infected with the virus and has the email address in his addy book, and the virus chose it on random to spoof and send to other users.
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.

  12. #12
    If your 5555... Swafe's Avatar
    Join Date
    Jul 2003
    Location
    Then I'm...
    Posts
    6,666
    Thanks
    0
    Thanked
    0 times in 0 posts
    why spoof hexus tho
    Quote Originally Posted by Knoxville
    As I find big muff's to be a bit of an aquired taste
    AMD Athlon 4400X2 @ 2.565PenisextentionMhz
    Dual Layer, Gold Plated, LED Power,Dual Golden OMG IT MAKES MY CodPiece BIGGER 1-1-1-1 DDR62.3 @ 1222.3433Mhz
    5 X 400GB Porn Array
    X1800XT Dildo enchanged 3D Version, 512MegaLongJohn
    Oh, did I mention.....I like sheep.....


    WWW.MrsBurley.CO.UK
    now updated

  13. #13
    Ive got 10/40w for blood... THCi's Avatar
    Join Date
    Jul 2003
    Location
    Somewhere, sometime, dunno why though.
    Posts
    512
    Thanks
    0
    Thanked
    0 times in 0 posts
    Originally posted by Agent
    the virus chose it on random to spoof and send to other users.
    Why ask such questions?

  14. #14
    Senior Member joshwa's Avatar
    Join Date
    Jul 2003
    Location
    Shef-field, UK
    Posts
    4,817
    Thanks
    94
    Thanked
    66 times in 61 posts
    • joshwa's system
      • Motherboard:
      • PC Chips M577 AT/ATX
      • CPU:
      • AMD K6-2 500Mhz
      • Memory:
      • 512mb PC100 SDRAM
      • Storage:
      • 6.4GB Samsung
      • Graphics card(s):
      • 16mb Matrox G400 Dual Head AGP
      • PSU:
      • ATX 145watt
      • Case:
      • Midi Tower AT
      • Monitor(s):
      • 27" iiyama TFT Widescreen
      • Internet:
      • Awful horrible ADSL
    Originally posted by Swafeman
    why spoof hexus tho
    most of these viruses just seem to pick email addresses to use at random from the address book.

  15. #15
    HEXUS.social member Agent's Avatar
    Join Date
    Jul 2003
    Location
    Internet
    Posts
    19,158
    Thanks
    732
    Thanked
    1,604 times in 1,043 posts
    Originally posted by THCi
    Why ask such questions?
    What question ?
    Quote Originally Posted by Saracen View Post
    And by trying to force me to like small pants, they've alienated me.

  16. #16
    You are feeling sleepy... acidrainy's Avatar
    Join Date
    Jul 2003
    Location
    Glasgow
    Posts
    1,518
    Thanks
    4
    Thanked
    2 times in 2 posts
    Originally posted by Agent
    What question ?
    I think he used your quote to answer Swafeman's question
    Originally posted by Swafeman
    why spoof hexus tho

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •