[WBEL-users] Message headers.

[haynest@mchsi.com]

Tom's not at the Vatican this week. 

I am guilty as charged on the win2k (sorry). I run WBEL on a server though...

It looked to me from the headers like the mail was coming from Italy too, and
here I am stuck in Indiana deleting automatic "virus replies."

Thanks...   Tom

> here is what a 5 min dig brings up:
> 
> - Person in Question is Tom Haynes ( his email ID is/was being used to 
> send these emails onto the list )
> 
> - Tom has posted from Mchsi.com ( which seems to be a rebranded ATT 
> broadband provider in the US ) = 12.215.103.109
> 
> - These emails came from Italy. Maybe Tom's visiting the pope....
> 
> - The IP these emails came from : 217.220.57.226 : has never posted to 
> the WBEL lists before ( or even that subnet that its a part of  { 
> 217.220.57.224 - 217.220.57.255 }).
> 
> This is not him posting the e-mails in. This is someone else's machine 
> that has his email address on there ( if its in an address book it might 
> be someone who has replied to a msg that Tom sent into this list ).
> 
> Its a spambot doing its thing, random from address and random to address.
> 
> So who are the Italian users here with Windoze and using the allocated 
> netrange 217.220.57.224 - 217.220.57.255 ... ?
> 
> Although Tom does seem to have this :
> X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
> 
> 
> - KB
> 
> 
> Rafael Baquero S. wrote:
> > Hi Haynest.
> > 
> > These are the full headers of the three virus infected messages I have 
> > received. I am also posting them to the list in case anyone has any 
> > suggestions.
> > 
> > Hope this helps.
> > 
> > Rafael.
> > 
> -- 
> 
> Karanbir Singh
> 
> http://www.karan.org/
> ICQ : 2522219 - Yahoo IM : z00dax
> GnuPG Public Key : http://www.karan.org/publickey.asc