[pchelpers] Re: Hi
- From: "Nigel Hunter" <nigel.hunter@xxxxxxxxxx>
- To: <pchelpers@xxxxxxxxxxxxx>
- Date: Thu, 29 Jan 2004 07:53:43 -0000
Thanks Scott
-----Original Message-----
From: pchelpers-bounce@xxxxxxxxxxxxx
[mailto:pchelpers-bounce@xxxxxxxxxxxxx]On Behalf Of Scott McNay
Sent: 29 January 2004 03:37
To: Nigel Hunter
Subject: [pchelpers] Re: Hi
Hi Nigel,
Wednesday, January 28, 2004, 12:43:10 PM, you wrote:
NH> Hi Scott Is there a relevance with that email address as in viruses or
such
NH> like
My mail server, when it receives an email, records the IP address of
the system that it got the email from. Most SMTP servers do this. In
this case, the IP address was 196.35.116.196, as you can see in the
Received: line, below, which turns out to be mfpsjb01.motorite.co.za
(which confirms what my email server says).
The Message-Id: line mentions "host25.the-web-host.com", which is the
same as my email server, which indicates that the original message did
not have a Message-Id: line in it.
Since the worm gets the email addresses from the infected system to
fill in the From: and To: addresses, whatever system sent the message
apparently has emails to or from both hilda@xxxxxxxxxxxxxxxxx and
wizard@xxxxxxxxx
That "hi" email on the list is from the same IP address, therefore the
same person, whoever it is, is probably a member of this list.
********************
In my email
********************
Received: from movingheads.co.za (hidden-user@xxxxxxxxxxxxxxxxxxxxxxx
[196.35.116.196])
by host25.the-web-host.com (8.12.10/8.12.10) with ESMTP id
i0S7CTAL014110
for <wizard@xxxxxxxx>; Wed, 28 Jan 2004 02:12:35 -0500
Message-Id: <200401280712.i0S7CTAL014110@xxxxxxxxxxxxxxxxxxxxxxx>
From: hilda@xxxxxxxxxxxxxxxxx
To: wizard@xxxxxxxx
Subject:
Date: Wed, 28 Jan 2004 09:07:20 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0013_564CEC88.FD2B34DD"
X-Priority: 3
X-MSMail-Priority: Normal
X-UIDL: ?k7!!~?"#!Pa%#!3DM!!
*******************
Via PCHelpers
*******************
Received: from turing.freelists.org (freelists-180.iquest.net
[206.53.239.180])
by host25.the-web-host.com (8.12.10/8.12.10) with ESMTP id
i0S7IrAL015728
for <wizard@xxxxxxxx>; Wed, 28 Jan 2004 02:18:59 -0500
Received: from turing (localhost [127.0.0.1])
by turing.freelists.org (Avenir Technologies Mail Multiplex) with
ESMTP
id 0FEFB394ACE; Wed, 28 Jan 2004 02:09:12 -0500 (EST)
Received: with ECARTIS (v1.0.0; list pchelpers); Wed, 28 Jan 2004
02:09:09 -0500 (EST)
X-Original-To: pchelpers@xxxxxxxxxxxxx
Delivered-To: pchelpers@xxxxxxxxxxxxx
Received: from local.nu (mfpsjb01.motorite.co.za [196.35.116.196])
by turing.freelists.org (Avenir Technologies Mail Multiplex) with
ESMTP id 2D215394D4A
for <pchelpers@xxxxxxxxxxxxx>; Wed, 28 Jan 2004 02:05:36 -0500 (EST)
From: wizard@xxxxxxxx
To: pchelpers@xxxxxxxxxxxxx
Subject: [pchelpers] Hi
Date: Wed, 28 Jan 2004 09:10:34 +0200
MIME-Version: 1.0
Content-type: text/plain
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <20040128070536.2D215394D4A@xxxxxxxxxxxxxxxxxxxx>
Content-Transfer-Encoding: 8bit
X-archive-position: 3660
X-ecartis-version: Ecartis v1.0.0
Sender: pchelpers-bounce@xxxxxxxxxxxxx
Errors-To: pchelpers-bounce@xxxxxxxxxxxxx
X-original-sender: wizard@xxxxxxxx
Precedence: normal
Reply-To: pchelpers@xxxxxxxxxxxxx
X-list: pchelpers
X-UIDL: ANG!!~R@!!BRF"!_&="!
--Scott.
Regards, John Durham (list moderator)
<http://modecideas.com/contact.html?sig>
Freelists login at //www.freelists.org/cgi-bin/lsg2.cgi
List archives at //www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Good advice is like good paint- it only works if applied.
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.569 / Virus Database: 360 - Release Date: 26/01/04
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.569 / Virus Database: 360 - Release Date: 26/01/04
Regards, John Durham (list moderator) <http://modecideas.com/contact.html?sig>
Freelists login at //www.freelists.org/cgi-bin/lsg2.cgi
List archives at //www.freelists.org/archives/pchelpers
PC-HELPERS list subscribe/unsub at http://modecideas.com/discuss.htm?sig
Good advice is like good paint- it only works if applied.
Other related posts:
