odd spam mail

[obi]

I've been recieving lot of spam mail recently, and all of them are like this -


Hello Dear!,

Finally i've found possibility to right u, my lovely girl :)
All our photos which i've made at the beach (even when u're without ur
bh:))
photos are great! This evening i'll come and we'll make the best SEX :)

Right now enjoy the photos.
Kiss, James.
ansauefu



My friend has also recied mail exactly the same as this apart from the seeming random last line. Within this mail is a Zip file.
The sender is james@ *whatever your e-mail domain is* so in my case its yahoo.com, in my friends, its stvincent.ac.uk.

What I worried about was if this was a worm sending mail from our PC's as we are getting around 7-10 mails like this a day.

Here is the E-mail headder

X-Apparently-To: [email protected] via 66.218.93.69; Sun, 02 Nov 2003 00:58:48 -0800
X-YahooFilteredBulk: 212.56.137.87
Return-Path: <[email protected]>
Received: from 212.56.137.87 (HELO localhost) (212.56.137.87) by mta227.mail.scd.yahoo.com with SMTP; Sun, 02 Nov 2003 00:58:44 -0800
From: [email protected] | Add to Address Book
To: "Obi_ag" <[email protected]>
Reply-to: [email protected]
X-Mailer: The Bat! (v1.62)
X-Priority: 1 (High)
Subject: Re[2]: our private photos ansiuefr
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------22B05DE1007CE61"
Content-Length: 12412


I have done a whois onthe IP that appears in there -

IP Address: [212.56.137.87] 212.56.137.87

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html

inetnum: 212.56.137.64 - 212.56.137.127
netname: BROWSERS
descr: Browsers Internet Cafe
country: MT
remarks: ---------------------------------
remarks: SPAM/ABUSE: [email protected]
remarks: ---------------------------------
admin-c: DS13801-RIPE
tech-c: MC2549-RIPE
status: ASSIGNED PA
notify: [email protected]
mnt-by: MELITACABLE-MNT
mnt-lower: MELITACABLE-MNT
mnt-routes: MELITACABLE-MNT
changed: [email protected] 20010310
changed: [email protected] 20011206
changed: [email protected] 20021113
source: RIPE

route: 212.56.128.0/19
descr: Melitacable
origin: AS12709
notify: [email protected]
mnt-by: MELITACABLE-MNT
changed: [email protected] 19990216
changed: [email protected] 19991007
source: RIPE

role: MELITACABLE Hostmaster
address: Melita Cable plc
address: Gasan Centre
address: Mriehel By-Pass
address: Mriehel BKR 14
address: MALTA
remarks: ---------------------------------
remarks: SPAM/ABUSE: [email protected]
remarks: ---------------------------------
phone: +356 2149 0006
fax-no: +356 2274 5040
e-mail: [email protected]
admin-c: NC501-RIPE
tech-c: MPB5-RIPE
tech-c: TE949-RIPE
nic-hdl: MC2549-RIPE
notify: [email protected]
mnt-by: MELITACABLE-MNT
changed: [email protected] 20021025
source: RIPE

person: Daniel Schembri
address: Browsers Internet Cafe
address: Corner Pocket
address: Triq il-Kavetta
address: Bugibba
address: Malta
phone: +356 585082
nic-hdl: DS13801-RIPE
remarks: Administrative contact for Browsers
notify: [email protected]
mnt-by: MELITACABLE-MNT
changed: [email protected] 20010131
source: RIPE


This just pisses me off =/

[TheGeepster]

I pretty much delete those without a second thought. Who knows, I may have gotten that one before.

Ever get spam from someone with your username but at a different email server? I have a filter for that one.

[Master Ghaleon]

I get those sometimes, some saying that I havent see ya in awhile and I loved ya ever since we were in high school and shit like that. I just delete them

[War Lord]

http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Someone that had been here using my main pc infected it with it.
I noticed something was up when e-mails were being sent out and norton was scanning outgoing messages.

Have to question my friends who were here.

[Link 101]

I just delete the messages like that. They are gay and dumb. Don't waste your time reading them and stuff.

[linkofzelda1]

You know that junk mail you posted before? I got one. Apparently a lot of people have. The guy was based in Holland or something, and he stole almost 10 million dollars from around the world from that damn email.

[VEL]

I get some unusual spam, here is one of them, I got quite a few similar to this, one even had a pic.


SEE a Teen Farm Girl Do it with her horse see it Free!
You think you have seen some pretty crazy p*rn on the
internet?YOU HAVEN'T SEEN SH*T! I saw the most unbelievable
movie clip ever to grace the internet! These guys put up a
clip of a beautiful teen farm girl who actually f*cks her horse!
NO BULLSHIT,SHE ACTUALLY F*CKS A HORSE WITH A 31 INCH C*CK!

[Ich]

"Chemical spill in pussy orphanage"

I think that's about as weird as it can get.

[Crazy_Link]

Ive been recently getting that crap...


31 INCH C*CK

God damn! :sick:

[*b*]

Originally posted by VEL
SEE a Teen Farm Girl Do it with her horse see it Free!
You think you have seen some pretty crazy p*rn on the
internet?YOU HAVEN'T SEEN SH*T! I saw the most unbelievable
movie clip ever to grace the internet! These guys put up a
clip of a beautiful teen farm girl who actually f*cks her horse!
NO BULLSHIT,SHE ACTUALLY F*CKS A HORSE WITH A 31 INCH C*CK!

I've gotten that so many times... it's like all I get is porn emails. and most of them are enough to make me puke! Viagra this and farm sex that... damn...

I use hotmail though, with the spam filter. that helps alot, exept when I'm expecting a important email from somone NOT on my contacts list... then I actually have to go in there and see that sh- er... crap :shrug:

[stormwatcheagle]

What I do is make an account at hotmail and use it for crap that I don't care about or to sign up for stuff so I don't get all the spam involved.

[AtmaWeapon]

Report them with www.spamcop.net . It's a pain to find the free service, but I use it. It hasn't reduced the spam in my 6-year-old yahoo account, but I do notice that about once a week I start getting spam from different servers.

[deathbyhokie]

umm..obi, that's a virus of some sort. i work within the government for the state of Virginia, and we got a warning e-mail about messages form james@(whatever domain), containing zipped files. i'm not sure what it is(the e-mail we got didn't say), but it isn't good

[theplustwo]

I have a special e-mail address I use just for spam. It's [email protected]. And [email protected]. Those two accounts just get all the crap that makes you enter in an e-mail. (Flash, RealPlayer, etc.) Not that I use RealPlayer. I've re-formatted in the past just to get rid of the fucking piece of shit.

[obi]

Originally posted by War Lord
http://securityresponse.symantec.com/avcenter/venc/data/[email protected]

Someone that had been here using my main pc infected it with it.
I noticed something was up when e-mails were being sent out and norton was scanning outgoing messages.

Have to question my friends who were here.


Thanks for the Link War Lord, I figured it was a worm =/
I ran the detection utility and it didnt find it on my pc, so I at least know its not coming from me :thumbsup:


Originally posted by deathbyhokie
umm..obi, that's a virus of some sort. i work within the government for the state of Virginia, and we got a warning e-mail about messages form james@(whatever domain), containing zipped files. i'm not sure what it is(the e-mail we got didn't say), but it isn't good

^see War Lord's post above^