ezekiel's chariot - 張敦楷 (pjammer) wrote,
ezekiel's chariot - 張敦楷
pjammer

  • Mood:
  • Music:

Unsolicited_Crap.exe

Spam is one of the unfortunate realities that anybody with an internet account must deal with. On any given day, my mailbox is filled with dozens of offers for viagra, credit cards, get-rich-quick schemes, mortgages, passwords to pay pr0n sites or schlong-lengthening pharmaceuticals. With the exception of the last item on the aforementioned list, I delete everything else ...

Lately, I've been getting quite a number of annoying spam-like emails with large executable attachments, with vague suggestions that "you really should run this." So I'm supposed to run that "Windows Security Patch" executable sent from a stranger by email? Right.

More puzzling - these emails are NOT sent from the typical [blah123]@yahoo.com or spam-friendly-nation (*.cn, *.kr, *.ru) domains that spammers normally use. Is there some sort of virus loose that hijacks the email programs of innocent computer users with poorly-protected machines and uses them to send copies of itself?


(continued from main journal)

Received: from livejournal.com ([66.150.15.150]);
Fri, 2 Aug 2002 06:21:15 -0700
Received: from sccrmhc02.attbi.com (sccrmhc02.attbi.com [204.127.202.62])
by livejournal.com (Postfix) with ESMTP id 9DC1C33DBF
for <pjammer@livejournal.com>; Fri, 2 Aug 2002 06:21:10 -0700 (PDT)
Received: from Xjqnoi ([12.239.20.109]) by sccrmhc02.attbi.com
(InterMail vM.4.01.03.27 201-229-121-127-20010626) with SMTP
id <20020802132105.EKOW221.sccrmhc02.attbi.com@Xjqnoi>
for <pjammer@livejournal.com>; Fri, 2 Aug 2002 13:21:05 +0000
From: jgess <jgess@tampatrib.com>
To: pjammer@livejournal.com
Subject: W32.Elkern removal tools
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=V134g4eD4902Z
Message-Id: <20020802132105.EKOW221.sccrmhc02.attbi.com@Xjqnoi>
Date: Fri, 2 Aug 2002 13:21:10 +0000
Return-Path: mikevora@attbi.com
X-OriginalArrivalTime: 02 Aug 2002 13:21:15.0851 (UTC) FILETIME=[7AD1F1B0:01C23A27]

--V134g4eD4902Z
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

Mcafee give you the very W32.Elkern removal tools
W32.Elkern is a very dangerous virus that can infect on Win98/Me/2000/XP.

For more information,please visit http://www.Mcafee.com

--V134g4eD4902Z
Content-Type: application/octet-stream;
name=install.exe
Content-Transfer-Encoding: base64
Content-ID: <MwAa51s10692jQcEw>

This is the fourth time this week I've received an unsolicited executable ... has anybody else dealt with this, or did I just recently provoke the enmity of a determined-but-none-too-bright cracker-wannabe?
Subscribe
  • Post a new comment

    Error

    default userpic

    Your reply will be screened

    Your IP address will be recorded 

  • 22 comments