|
PureBytes Links
Trading Reference Links
|
Hi List,
as of 2/3 weeks ago I constatly get emails with a worm (or a virus). Those
emails pretend to be from Microsoft containing a security patch. (No danger
for me or for others by me, they were all 'eaten up').
All of them came with a wrong email address (of course) and from only one
provider: charter.net. They all went through its mail-cluster of charter.net
with the IP-groupe 209.225.8.XXX. Concrete addresses of the mail-cluster were
209.225.8.30, 209.225.8.36, 209.225.8.29.
Is anybody on this list, who access the internet through charter.net? He/She
may has subscribed under a different email address. Has anybody else got
those emails?
>From the time stamp that are printed in those emails the infected pc should
stand in Eastern USA because they all ahve Eastern Standard Time (11:45:57
-0400). The last two worms that I received were created and/or sent at Tue,
07 Oct 2003 11:41:35 EST and Tue, 07 Oct 2003 11:45:57.
The id-s of the emails are:
SMTP id 17753045; Tue, 07 Oct 2003 11:45:57 -0400
& SMTP id 17704618; Tue, 07 Oct 2003 11:41:35 -0400
Now I saw that I got a simular email from:
Received: from ilse (nat3.srtnet.com [216.221.96.233])
by BASS2.srtnet.com (8.12.5/8.12.5) with SMTP id h97Gxq7P025179;
Tue, 7 Oct 2003 11:59:53 -0500 (CDT)
Date: Tue, 7 Oct 2003 11:59:52 -0500 (CDT)
Message-Id: <200310071659.h97Gxq7P025179@xxxxxxxxxxxxxxxx>
Acc. to nic.com 216.221.96.233 can be a Telephone Backbone-Router. So maybe
s.o. is sending his worm by telephone spending extra money??
(may be you can scan your pc for the Message-Id??)
Thanks in advance,
carl
|