[WBEL-users] Message headers.

[Karanbir Singh]

here is what a 5 min dig brings up:

- Person in Question is Tom Haynes ( his email ID is/was being used to 
send these emails onto the list )

- Tom has posted from Mchsi.com ( which seems to be a rebranded ATT 
broadband provider in the US ) = 12.215.103.109

- These emails came from Italy. Maybe Tom's visiting the pope....

- The IP these emails came from : 217.220.57.226 : has never posted to 
the WBEL lists before ( or even that subnet that its a part of  { 
217.220.57.224 - 217.220.57.255 }).

This is not him posting the e-mails in. This is someone else's machine 
that has his email address on there ( if its in an address book it might 
be someone who has replied to a msg that Tom sent into this list ).

Its a spambot doing its thing, random from address and random to address.

So who are the Italian users here with Windoze and using the allocated 
netrange 217.220.57.224 - 217.220.57.255 ... ?

Although Tom does seem to have this :
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)


- KB


Rafael Baquero S. wrote:
> Hi Haynest.
> 
> These are the full headers of the three virus infected messages I have 
> received. I am also posting them to the list in case anyone has any 
> suggestions.
> 
> Hope this helps.
> 
> Rafael.
> 
-- 

Karanbir Singh

http://www.karan.org/
ICQ : 2522219 - Yahoo IM : z00dax
GnuPG Public Key : http://www.karan.org/publickey.asc