Stories
Slash Boxes
Comments
NOTE: use Perl; is on undef hiatus. You can read content, but you can't post it. More info will be forthcoming forthcomingly.

All the Perl that's Practical to Extract and Report

use Perl Log In

Log In

[ Create a new account ]

TeeJay (2309)

TeeJay
  (email not shown publicly)
http://www.aarontrevena.co.uk/

Working in Truro
Graduate with BSc (Hons) in Computer Systems and Networks
pm : london.pm, bath.pm, devoncornwall.pm
lug : Devon & Cornwall LUG
CPAN : TEEJAY [cpan.org]
irc : TeeJay
skype : hashbangperl
livejournal : hashbangperl [livejournal.com]
flickr :hashbangperl [flickr.com]

Journal of TeeJay (2309)

Thursday August 19, 2004
04:49 AM

did this mail ever go near messagelabs?

[ #20470 ]
I found this in my inbox, I am guessing it is a virus and I am also guessing it went knowhere near messagelabs.

Date: Thu, 19 Aug 2004 00:26:33 +0400
From: ulia@*****.ru
To: asavigesahy@*****.org
Subject: Re: Old photos
Parts/Attachments:
   1 Shown     5 lines  Text (charset: Windows-1252)
   2          30 KB     Application
----------------------------------------

Have a look at these.

+++ Attachment: No Virus found
+++ MessageLabs AntiVirus - www.messagelabs.com

    [ Part 2, Application/OCTET-STREAM (Name: "old_photos.zip")  40KB. ]
    [ Cannot display this part. Press "V" then "S" to save in a file. ]

of course there is no such user as asavigesahy at that domain. I need to start bouncing this kind of crap.

The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More | Login | Reply
Loading... please wait.
  • Nah mate, It's a common trick used by worms, you can usually tell by the extension of the attachment, etc.
    --
    -Scott McWhirter- | -kungfuftr-
    "JAWK - Just Another Whiny Kid"
  • They're trying to both make us look bad, and make users trust the email contents.
  • No, you don't want to bounce it. Reject it during the SMTP connection, rather than later bouncing it to the poor unfortunate victim of a joe-job.
    • oh yes, bounced mail is such a PITA these days.

      Most of the crud that ends up in my catchall inbox is bounces, and most of those are Virus or Spam responses that should really have checked against spoofing.

      --

      @JAPH = qw(Hacker Perl Another Just);
      print reverse @JAPH;