RE: CRIME Re: Approved (Ref: 3394-65467)

From: Kuo, Jimmy (Jimmy_Kuo@private)
Date: Wed May 21 2003 - 19:42:40 PDT

  • Next message: Seth Arnold: "Re: CRIME Re: Approved (Ref: 3394-65467)"

    That would mean it hit a spammer!  Rejoice!?
    
    -----Original Message-----
    From: Andrew Plato
    To: crime@private
    Sent: 5/21/03 6:24 PM
    Subject: RE: CRIME Re: Approved (Ref: 3394-65467)
    
    Looks like the email originates at the Politehnica of Bucharest
    (p5.pub.ro).
    
    ___________________________________
    Andrew Plato, CISSP
    President / Principal Consultant
    Anitian Corporation
    
    Enterprise Security &
    Infrastructure Solutions
     
    503-644-5656 Office
    503-644-8574 Fax
    503-201-0821 Mobile
    www.anitian.com 
    ___________________________________
    
    
    > -----Original Message-----
    > From: Kuo, Jimmy [mailto:Jimmy_Kuo@private] 
    > Sent: Wednesday, May 21, 2003 5:02 PM
    > To: 'crime@private '
    > Subject: RE: CRIME Re: Approved (Ref: 3394-65467)
    > 
    > 
    > Someone's infected with Palyh/Sobig.B.  (Eventually, it'll be 
    > renamed to
    > Sobig.B.)
    > 
    > This is the one that I warned about in my Sunday posting.  
    > Looks like there's a bug that sends the email without the 
    > attachment, or are we stripping attachments via some sort of filter?
    > 
    > (Someone with the headers want to look to see who sent it?)
    > 
    > Jimmy
    > 
    > -----Original Message-----
    > From: support@private
    > To: crime@private
    > Sent: 5/21/03 3:44 PM
    > Subject: CRIME Re: Approved (Ref: 3394-65467)
    > 
    > All information is in the attached file.
    > 
    



    This archive was generated by hypermail 2b30 : Wed May 21 2003 - 20:35:05 PDT