[ale] Interesting trojan attempt?

[David S. Jackson]

On Sun, Aug 03, 2003 at 02:54:11PM -0700 Kevin Karst <kevinkarst at yahoo.com> wrote:
> 
> this message.zip is popular currently ..
> it is harmful software and there is information on the
> net about it.
[...]

What I'd like to know is, how did they come up with
sylvester.dsj.net.  Near as I can see, no external zone XFER was
made from my network.  I used to have sylvester MXed with my old
provider, but that was a couple of years ago now.  Could he have
just gotten an old email or something off an archive or
something?  I guess that's it.

> > ----- Forwarded message from admin at sylvester.dsj.net
> > -----
> > 
> > Received: from localhost (dsj at localhost [127.0.0.1])
> > 	by sylvester.dsj.net (8.12.3/8.12.3/Debian-5) with
> > ESMTP id h7385pXI009561
> > 	for <dsj at localhost>; Sun, 3 Aug 2003 04:38:42 -0400
> > Received: from pop.dsj.net [207.217.120.137]
> > 	by localhost with POP3 (fetchmail-5.9.11)
> > 	for dsj at localhost (single-drop); Sun, 03 Aug 2003
> > 04:38:42 -0400 (EDT)
> > Received: from localhost ([211.110.44.18])
> > 	by tern (EarthLink Mail Service) with SMTP id
> > 19Jdzq2Bj3NZFmh0
> > 	for <dsj at dsj.net>; Sun, 3 Aug 2003 00:46:18 -0700
> > (PDT)
> > From: admin at sylvester.dsj.net
> > To: Dsj <dsj at dsj.net>
> > Reply-To: admin at sylvester.dsj.net
> > X-Mailer: The Bat! (v1.61)
> > X-Priority: 2 (High)
> > Subject: your account                        
> > vjovvlov
> > MIME-Version: 1.0
> > Content-Type: multipart/mixed;
> > boundary="----------5B228CBD052294B"
> > Message-Id: <200308030046.19Jdzq2Bj3NZFmh0 at tern>
> > Date: Sun, 3 Aug 2003 00:46:18 -0700 (PDT)
> > Status: RO
> > Content-Length: 29765
> > Lines: 402
> > 
> > 
> > Hello there,
> > 
> > I would like to inform you about important
> > information regarding your
> > email address. This email address will be expiring.
> > Please read attachment for details.
> > 
> > ---
> > Best regards, Administrator
> > vjovvlov


-- 
David S. Jackson                        dsj at dsj.net
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
I was in Vegas last week. I was at the roulette table,
having a lengthy argument about what I considered an
Odd number.
		-- Steven Wright
_______________________________________________
Ale mailing list
Ale at ale.org
http://www.ale.org/mailman/listinfo/ale