|
PureBytes Links
Trading Reference Links
|
Hi
Just another word of caution:
Is possible to fake the headers( spoofing) and worse using wingates
one can make it untraceble( however illegal in some countries
but "they " are sending viruses or spam)
ALWAYS
-make sure you have the latest virus definitions
-Try not to have html preview on (or just preview)on your email client
-Have "Hide extension for known types OFF"!!! In your FolderView
options so you can see the real type of the attachement
-Have your Virus detection software schedule to run a full scan at
least once a week.
-Use common sense :)
Also the "Junk/Spam" filter should be on - it may help a lot.
adrian
--- In amibroker@xxxxxxxxxxxxxxx, "Tomasz Janeczko" <amibroker@xxxx>
wrote:
> Everyone,
>
> It seems that we have new breed of viruses spreading around.
>
> You should be extremely cautious. Do NOT open any suspected
attachments.
> Even if "FROM" field says it comes from the person you know.
>
> The problem with e-mail ( SMTP ) standard is that that "FROM" and
any other
> field can be easily faked and set to ANY VALUE by ANYONE.
>
> The true sender is revealed from studying the header.
>
> See for example the one I have received and it was looking as sent
from my account it but it did not.
>
> The true sender was:
> Received: from unknown (HELO internet) (213.116.168.40)
> by mta5.grp.scd.yahoo.com with SMTP; 4 Mar 2004 14:23:06 -0000
>
> "unknown" 213.116.168.40
>
> 213.116.168.40 IS "1Cust40.tnt37.rtm1.nld.da.uu.net" and it is
located in AMSTERDAM.
> ========================================================
>
> E-mails that come truly from me have ALWAYS the following in the
header:
>
> Received: from abd104.neoplus.adsl.tpnet.pl (HELO tj) (83.27.13.104)
> by n02.neo.pl with SMTP; 4 Mar 2004 15:03:04 -0000
>
> (they are sent from the computer in *neoplus.adsl.tpnet.pl domain )
>
> I am checking various possibilities and will probably digitally
sign all outgoing correspondence
> to make it easy to identify/verify the sender.
>
> Best regards,
> Tomasz Janeczko
> amibroker.com
>
> ========= THE HEADER OF FAKE E-MAIL ==================
> Return-Path: <sentto-8014701-964-1078410194-amibroker=neo.pl@xxxx>
> Delivered-To: amibroker@xxxx
> Received: (qmail 13227 invoked from network); 4 Mar 2004 14:33:48 -
0000
> Received: from n18.grp.scd.yahoo.com (66.218.66.73)
> by n02.neo.pl with SMTP; 4 Mar 2004 14:33:48 -0000
> X-eGroups-Return: sentto-8014701-964-1078410194-
amibroker=neo.pl@xxxx
> Received: from [66.218.66.156] by n18.grp.scd.yahoo.com with NNFMP;
04 Mar 2004 14:23:14 -0000
> X-Sender: amibroker@xxxx
> X-Apparently-To: amiquote@xxxxxxxxxxxxxxx
> Received: (qmail 54890 invoked from network); 4 Mar 2004 14:23:10 -
0000
> Received: from unknown (66.218.66.166)
> by m16.grp.scd.yahoo.com with QMQP; 4 Mar 2004 14:23:10 -0000
> Received: from unknown (HELO internet) (213.116.168.40) <====
REAL SENDER !!!!!!!!
> by mta5.grp.scd.yahoo.com with SMTP; 4 Mar 2004 14:23:06 -0000
> To: amiquote@xxxxxxxxxxxxxxx <=== FAKE
> Message-ID: <nupnfnuisjlymgqluux@xxxxxxxxxxxxxxx>
> X-eGroups-Remote-IP: 213.116.168.40
> X-eGroups-From: staff@xxxxxxxxxxxxxxx
> From: amibroker@xxxx
> =================================================
>
>
> Best regards,
> Tomasz Janeczko
> amibroker.com
> ----- Original Message -----
> From: "Tomasz Janeczko" <amibroker@xxxx>
> To: <amibroker@xxxxxxxxxxxxxxx>
> Sent: Thursday, March 04, 2004 3:31 PM
> Subject: [amibroker] ATTENTION, new virus is spreading fast
>
>
> > Hello,
> >
> > Attention, there is a new virus spreading out fast (I have
received 10 copies already).
> > The message has the subject of
> > "E-mail account security warning."
> > or
> > "Notify about your e-mail account utilization."
> >
> > As with any other viruses - DO NOT open attachments in such
messages.
> >
> > Best regards,
> > Tomasz Janeczko
> > amibroker.com
> >
> >
> >
> >
> >
> > Send BUG REPORTS to bugs@xxxx
> > Send SUGGESTIONS to suggest@xxxx
> > -----------------------------------------
> > Post AmiQuote-related messages ONLY to: amiquote@xxxxxxxxxxxxxxx
> > (Web page: http://groups.yahoo.com/group/amiquote/messages/)
> > --------------------------------------------
> > Check group FAQ at:
http://groups.yahoo.com/group/amibroker/files/groupfaq.html
> > Yahoo! Groups Links
> >
> >
> >
> >
> >
> >
------------------------ Yahoo! Groups Sponsor ---------------------~-->
Buy Ink Cartridges or Refill Kits for your HP, Epson, Canon or Lexmark
Printer at MyInks.com. Free s/h on orders $50 or more to the US & Canada.
http://www.c1tracking.com/l.asp?cid=5511
http://us.click.yahoo.com/mOAaAA/3exGAA/qnsNAA/GHeqlB/TM
---------------------------------------------------------------------~->
Send BUG REPORTS to bugs@xxxxxxxxxxxxx
Send SUGGESTIONS to suggest@xxxxxxxxxxxxx
-----------------------------------------
Post AmiQuote-related messages ONLY to: amiquote@xxxxxxxxxxxxxxx
(Web page: http://groups.yahoo.com/group/amiquote/messages/)
--------------------------------------------
Check group FAQ at: http://groups.yahoo.com/group/amibroker/files/groupfaq.html
Yahoo! Groups Links
<*> To visit your group on the web, go to:
http://groups.yahoo.com/group/amibroker/
<*> To unsubscribe from this group, send an email to:
amibroker-unsubscribe@xxxxxxxxxxxxxxx
<*> Your use of Yahoo! Groups is subject to:
http://docs.yahoo.com/info/terms/
|