Ich denke eher, es hat sich einer der Adressdatenbank des 7er.com-servers bemächtigt - denn den
webmaster@7er.com, von dem ich eine virenmail bekam, hat sicher niemand gespeichert...
Zitat:
From - Tue Mar 02 18:01:55 2004
X-UIDL: 1078234473.12986
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Symantec-TimeoutProtection: 0
Return-path: <webmaster@7er.com>
Envelope-to: crazy@7er.com
Delivery-date: Tue, 02 Mar 2004 14:34:33 +0100
Received: from [217.2.174.163] (helo=DOMINIQU.com)
by mxng18.kundenserver.de with esmtp (Exim 3.35 #1)
id 1AyA2G-0006JN-00; Tue, 02 Mar 2004 14:34:13 +0100
From: webmaster@7er.com
To: Xmailerdamon1260@7er.com
Subject: Your IP was logged
Importance: Normal
X-Mailer: Microsoft Outlook Express 5.50.4807.1700
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
Message-ID: <b8b9250eee26a1.267a5xsmailerV04.57@7er.com& gt;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="_DOMINIQU_Mime_004.cf5cc8ac7718c6.0 b"
X-RBL-Warning: (dialup.bl.kundenserver.de) This mail has been received from a dialup host.
Date: Tue, 02 Mar 2004 14:34:13 +0100
This is a multi-part message in MIME format.
--_DOMINIQU_Mime_004.cf5cc8ac7718c6.0b
Ladies and Gentlemen,
Downloading of Movies, MP3s and Software is illegal and punishable by law.
We hereby inform you that your computer was scanned under the IP 172.165.234.105 . The
contents of your computer were confiscated as an evidence, and you will be indicated.
In the next days, you'll get the charge in writing.
In the Reference code: #14956, are all files, that we found on your computer.
The sender address of this mail was masked, to protect us against mail bombs.
- You get more detailed information by the Federal Bureau of Investigation -FBI-
- Department for "Illegal Internet Downloads", Room 7350
- 935 Pennsylvania Avenue
- Washington, DC 20535, USA
- (202) 324-3000
--_DOMINIQU_Mime_004.cf5cc8ac7718c6.0b
Content-Type: plain/text;
name="Norton AntiVirus gelöscht1.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Norton AntiVirus gelöscht1.txt"
Tm9ydG9uIEFudGlWaXJ1cyBoYXQgZm9sZ2VuZGVuIEFuaGFuZy BlbnRmZXJudDogcmVmY29k
ZTE0OTU2LmV4ZS4NCkRlciBBbmhhbmcgIHdhciBtaXQgZGVtIF ZpcnVzIFczMi5Tb2Jlci5D
QG1tIGluZml6aWVydC4=
--_DOMINIQU_Mime_004.cf5cc8ac7718c6.0b--
|
Und die folgende dürfte eine auto-reply sein, der eine gefakete mail von mir (crazy@7er.com) bekommen hat:
Zitat:
From - Wed Mar 03 12:25:03 2004
X-UIDL: 1078301499.25270
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path: <postmaster@geo.vu.nl>
Envelope-to: crazy@7er.com
Delivery-date: Wed, 03 Mar 2004 09:11:39 +0100
Received: from [130.37.64.40] (helo=geo.vu.nl)
by mxng05.kundenserver.de with esmtp (Exim 3.35 #1)
id 1AyRTV-0004iU-00
for crazy@7er.com; Wed, 03 Mar 2004 09:11:29 +0100
Received: (from root@localhost)
by geo.vu.nl (8.11.0/8.11.0) id i238AdH20187
for crazy@7er.com; Wed, 3 Mar 2004 09:10:39 +0100 (MET)
Date: Wed, 3 Mar 2004 09:10:39 +0100 (MET)
From: postmaster@geo.vu.nl
Message-Id: <200403030810.i238AdH20187@geo.vu.nl>
To: crazy@7er.com
Subject: virus in your mail to jung
The viruschecker on our mailhost found a virus in your mail to
"jung"
Delivery of this message was stopped. Please check your system for viruses.
You can contact postmaster@geo.vu.nl for further info.
|
Mal sehen, wann das ein Ende hat - ich frage mich allerdings auch, ob hier nicht etwas verbessert werden kann, Christian? Das KANN nur Deine Adressdatenbank sein denn den x-mailer hat ganz sicher auch keiner im Adressbuch...
Gruß Norbert
[Bearbeitet am 3.3.2004 um 22:21 von Crazy]