|
PureBytes Links
Trading Reference Links
|
Everyone,
It seems that we have new breed of viruses spreading around.
You should be extremely cautious. Do NOT open any suspected attachments.
Even if "FROM" field says it comes from the person you know.
The problem with e-mail ( SMTP ) standard is that that "FROM" and any other
field can be easily faked and set to ANY VALUE by ANYONE.
The true sender is revealed from studying the header.
See for example the one I have received and it was looking as sent from my account it but it did not.
The true sender was:
Received: from unknown (HELO internet) (213.116.168.40)
by mta5.grp.scd.yahoo.com with SMTP; 4 Mar 2004 14:23:06 -0000
"unknown" 213.116.168.40
213.116.168.40 IS "1Cust40.tnt37.rtm1.nld.da.uu.net" and it is located in AMSTERDAM.
========================================================
E-mails that come truly from me have ALWAYS the following in the header:
Received: from abd104.neoplus.adsl.tpnet.pl (HELO tj) (83.27.13.104)
by n02.neo.pl with SMTP; 4 Mar 2004 15:03:04 -0000
(they are sent from the computer in *neoplus.adsl.tpnet.pl domain )
I am checking various possibilities and will probably digitally sign all outgoing correspondence
to make it easy to identify/verify the sender.
Best regards,
Tomasz Janeczko
amibroker.com
========= THE HEADER OF FAKE E-MAIL ==================
Return-Path: <sentto-8014701-964-1078410194-amibroker=neo.pl@xxxxxxxxxxxxxxxxxxxxxxxx>
Delivered-To: amibroker@xxxxxx
Received: (qmail 13227 invoked from network); 4 Mar 2004 14:33:48 -0000
Received: from n18.grp.scd.yahoo.com (66.218.66.73)
by n02.neo.pl with SMTP; 4 Mar 2004 14:33:48 -0000
X-eGroups-Return: sentto-8014701-964-1078410194-amibroker=neo.pl@xxxxxxxxxxxxxxxxxxxxxxxx
Received: from [66.218.66.156] by n18.grp.scd.yahoo.com with NNFMP; 04 Mar 2004 14:23:14 -0000
X-Sender: amibroker@xxxxxx
X-Apparently-To: amiquote@xxxxxxxxxxxxxxx
Received: (qmail 54890 invoked from network); 4 Mar 2004 14:23:10 -0000
Received: from unknown (66.218.66.166)
by m16.grp.scd.yahoo.com with QMQP; 4 Mar 2004 14:23:10 -0000
Received: from unknown (HELO internet) (213.116.168.40) <==== REAL SENDER !!!!!!!!
by mta5.grp.scd.yahoo.com with SMTP; 4 Mar 2004 14:23:06 -0000
To: amiquote@xxxxxxxxxxxxxxx <=== FAKE
Message-ID: <nupnfnuisjlymgqluux@xxxxxxxxxxxxxxx>
X-eGroups-Remote-IP: 213.116.168.40
X-eGroups-From: staff@xxxxxxxxxxxxxxx
From: amibroker@xxxxxx
=================================================
Best regards,
Tomasz Janeczko
amibroker.com
----- Original Message -----
From: "Tomasz Janeczko" <amibroker@xxxxxx>
To: <amibroker@xxxxxxxxxxxxxxx>
Sent: Thursday, March 04, 2004 3:31 PM
Subject: [amibroker] ATTENTION, new virus is spreading fast
> Hello,
>
> Attention, there is a new virus spreading out fast (I have received 10 copies already).
> The message has the subject of
> "E-mail account security warning."
> or
> "Notify about your e-mail account utilization."
>
> As with any other viruses - DO NOT open attachments in such messages.
>
> Best regards,
> Tomasz Janeczko
> amibroker.com
>
>
>
>
>
> Send BUG REPORTS to bugs@xxxxxxxxxxxxx
> Send SUGGESTIONS to suggest@xxxxxxxxxxxxx
> -----------------------------------------
> Post AmiQuote-related messages ONLY to: amiquote@xxxxxxxxxxxxxxx
> (Web page: http://groups.yahoo.com/group/amiquote/messages/)
> --------------------------------------------
> Check group FAQ at: http://groups.yahoo.com/group/amibroker/files/groupfaq.html
> Yahoo! Groups Links
>
>
>
>
>
>
------------------------ Yahoo! Groups Sponsor ---------------------~-->
Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
http://www.c1tracking.com/l.asp?cid=5511
http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/GHeqlB/TM
---------------------------------------------------------------------~->
Send BUG REPORTS to bugs@xxxxxxxxxxxxx
Send SUGGESTIONS to suggest@xxxxxxxxxxxxx
-----------------------------------------
Post AmiQuote-related messages ONLY to: amiquote@xxxxxxxxxxxxxxx
(Web page: http://groups.yahoo.com/group/amiquote/messages/)
--------------------------------------------
Check group FAQ at: http://groups.yahoo.com/group/amibroker/files/groupfaq.html
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/amibroker/
<*> To unsubscribe from this group, send an email to:
amibroker-unsubscribe@xxxxxxxxxxxxxxx
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
|