Home page logo
/

nanog logo nanog mailing list archives

dcom worm - curious
From: "Stephen J. Wilcox" <steve () telecomplete co uk>
Date: Thu, 14 Aug 2003 12:43:45 +0100 (BST)



Got a few emails in with the Mimail worm attached, the thing is who is sending 
them as these are not email addresses/domain names that I use altho they do 
exist in some old websites that are still live.

Is someone spidering and spamming out this worm or something??

Steve

------------------------- BEGIN HEADERS -----------------------------
Received: from mail-0.telecomplete.net ([193.0.249.4] helo=mail.telecomplete.net)
        by mx-0.telecomplete.net with esmtp (Exim 4.10)
        id 19nGAW-0003Gn-00
        for rjnr () thedogsbollocks co uk; Thu, 14 Aug 2003 11:21:24 +0000
Received: from [203.122.2.209] (helo=localhost)
        by mail.telecomplete.net with smtp (Exim 4.20)
        id 19nGAH-0005Hi-Tj
        for rjnr () thedogsbollocks co uk; Thu, 14 Aug 2003 12:21:14 +0100
From: admin () thedogsbollocks co uk
To: Rjnr <rjnr () thedogsbollocks co uk>
Reply-To: admin () thedogsbollocks co uk
X-Mailer: The Bat! (v1.61)
X-Priority: 2 (High)
Subject: your account                         rspdhjri
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------FC242CEF000E8E3"
Message-Id: <E19nGAH-0005Hi-Tj () mail telecomplete net>
Date: Thu, 14 Aug 2003 12:21:14 +0100
-------------------------- END HEADERS ------------------------------



  By Date           By Thread  

Current thread:
  • dcom worm - curious Stephen J. Wilcox (Aug 14)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault