I traced the email address to France: inetnum: 193.252.22.128 - 193.252.22.159 netname: MAIL-ESSENTIALS-FREESERVE descr: Projet Mail Essentials country: FR admin-c: FSD11-RIPE tech-c: FSD11-RIPE status: ASSIGNED PA remarks: for hacking, spamming or security problems send mail to remarks: abuse@fsmail.net AND abuse@freeserve.com mnt-by: FT-BRX changed: gestionip.ft@francetelecom.com 20030904 source: RIPE I also sent an email to the people over there. I hope that this helps you. RMStringer _______________________________________________________ We must reject this primitive and almost cannibalistic delusion about knowledge, that an understanding of something requires first that we dismantle it, like a child who pulls a watch to pieces and spreads out the wheels in order to understand the mechanism.(Rene Thom, 1923-2002) -----Original Message----- From: klf-bounces+rmstringer=peoplepc.com@mailman.xmission.com [mailto:klf-bounces+rmstringer=peoplepc.com@mailman.xmission.com] On Behalf Of Dave Brzeski & Jilly Paddock Sent: Thursday, January 29, 2004 5:15 PM To: All bound for Mu-Mu Land. Subject: Re: [KLF] FW: Kpvrzrwv EMAIL: simon@antmusic.fsnet.co.uk On Thu, 29 Jan 2004 16:23:35 -0700, "RMStringer" <RMStringer@peoplepc.com> invaded my consciousness with the following:
WHO THE FUC IS THIS PERSON SENDING VIRSUS TO PEOPLE???????????? Anyone on the LIST???? I have seen a folder called " Kpvrzrwv" on my server. THIS Person sent me a virus!!!!! NOT a good Call!!!!
RMStringer
No, that person didn't send you a virus. These days e-mail viruses & worms always spoof the 'from' fields, as well as the 'to' fields, by which I mean they use various methods to steal e-mail addresses and randomly use them in the 'from' field of any copies it sends out. This is because many servers now automatically reject messages that don't have a valid 'from' address. Usually they search Outlook Express address books, but the last big one that did the rounds would search every text & html file on an infected computer's hard drives for any e-mail addresses & use them for both the 'to' & 'from' fields when it spread itself. That means if you have your e-mail on a web page, it can be farmed from the temporary internet files of anyone who's visited that web page. You may well find others are getting copies of this crap which are pretending to come from you. I've had about 50 copies in the last few days. Luckily I refuse to use Outlook Express, so I'm immune to most of the bloody things anyway. My biggest problem is that my e-mail domain has been spoofed by spammers in the same way, & I get literally hundreds of bounce messages every day of spam, which claims to be from me, which has been sent to dead e-mail addresses. This of course means that literally millions of people are receiving spam which looks like it came from me. :o( Dave Brzeski _______________________________________________ KLF mailing list KLF@mailman.xmission.com http://mailman.xmission.com/cgi-bin/mailman/listinfo/klf