h2g2 The Hitchhiker's Guide to the Galaxy: Earth Edition

X-Apparently-To:
* via 216.136.172.60; 14 Jan 2003 18:13:32 -0800 (PST)

Return-Path:
**

Received:
from 64.126.4.157 (EHLO mokc110mailxc3.everestkc.net) (64.126.4.157) by mta597.mail.yahoo.com with SMTP; 14 Jan 2003 18:13:31 -0800 (PST)

Received:
from smtp.everestkc.net (151-18-190.cmts03.ksle.everestkc.net [64.151.18.190]) by mokc110mailxc3.core.uniteone.com (iPlanet Messaging Server 5.0 Patch 1 (built Nov 13 2000)) with SMTP id for *; Tue, 14 Jan 2003 20:13:28 -0600 (CST)

Date:
Tue, 14 Jan 2003 20:13:30 +0000 (PM)

From:
** | This is Spam | Add to Address Book

Subject:
Fw: Crainletter

To:
*

Message-id:


MIME-version:
1.0

X-Mailer:
Microsoft Outlook Express 5.50.4133.2400

Content-type:
multipart/alternative; boundary="Boundary_(ID_bgRoMX6EGz8J7AgPKk+HhQ)"

Content-Length:
28092

* was mine
** the sender

Looks like the address is real... someone with an unpatched version of Outlook set up to access their Yahoo account (assuming the sender's address is a Yahoo one?)

I'd mail 'em and say 'you appear to have a virus' and include a link to details of the one you've been receiving...

not yahoo! mail sender

like I said before
behind @ sign is .com address of e-mail provider you have pay for. I think some one used some kind of "stealth" to hide real e-mail address!

Oh, right, the Yahoo bit is you

Is their address at everestkc.net or uniteone.com, though?

yes, yahoo is mine

the sender has everestkc.net mail
..I checked the site

Hi

The virus wouldn't have come from the BBC - we have virus scanning installed on *all* the servers, you can imagine how important that is to BBCi!

I know, Peta

...I never used this yahoo! mail address here directly

I just wondered in the good people of H2G2 could help to solve a problem.

You could contact the isp who it appears to be coming from (everest(?)) they would be interested and should be able to find out who it is and block the virus/spam?

I thought doing that, but I can not find right e-mail address within company!

I do not want send to public relations or something like that

Try postmaster@ domain name etc etc, I'm pretty sure postmaster is a legal requirement when you buy a domain name

Alternatively, try abuse@...

The mail is definitely coming from everestkc.net -- so the return address is probably genuine.

I will try abuse@ one

...postmaster / webmaster is often not read is my expience

Sorry to post this Peta, but

http://212.100.234.54/content/56/28860.html
http://www.vnunet.com/News/1137952

would tend to imply otherwise....Although it sounds like the Beeb got it before too much damage could occur.

I got automatic reply back within 30 second

looks like roadrunner!

From that second article...

"It is vital to keep your antivirus software updated regularly, even hourly, for the best security," said Carole Theriault, antivirus consultant at Sophos.

Nonsense!... the best security is simple: use a mail program that won't run attachments, and don't run them youself...

"The worm infects Windows PCs and modifies them so that the worm will reply to unread e-mails, sending dummy responses with an infected attachment (zipped_files.exe)."

Great - the only unread emails on my machine are the ones sitting in the spam folder I use to filter incoming messages, so maybe a few spammers (the ones who aren't smart enough to spoof a return address) will get it

Hi Ictoan,

Yes, you're quite right, I guess no company can be totally invincible. We do of course get sent loads, but normally the virus scans pick them up and they're dealt with immediately. We're as careful as it's possible to be I guess.