[Ferret-heaven] Re: Ryan Gill Virus

From: Ryan Gill (rmgill@mindspring.com)
Date: Mon Oct 07 2002 - 08:58:15 PDT


At 5:02 PM +0930 10/6/02, Douglas Greville wrote:
>Stu
>
> > Ryan Gill! Your computer is sending out a virus!!!!!!!!!!!!!!!

Considering my computers (OS X which is Unix base with Eudora) don't
run heavily scriptable mail apps (Like Outlook and such) and I've
been gone all weekend at a show, I suspect that the problem is
someone else's computer and it's virus using my username and the
false domain.

That's bugbear. I don't have it. Someone else on this list has it and
it's using an e-mail from me as a method of concealing itself.

See---
http://www.all4linux.com/modules.php?op=modload&name=News&file=article&sid=113

>I tried to send Ryan a similar message but got back an auto reply
>saying that there is no such email address.
>
>Ryan - have you become a non-person?

Here's the header info from one of the messages (My filters in Eudora
dropped it into the mail bin rather than the lists' bin.
'rmgill@realbig.co' isn't a valid domain for me or even a valid
domain at all. Its either ryan.gill@turner.com or
rmgill@mindspring.com to get me.

This one looks like its from someone with a bellsouth.net address.
The headers read Most recent mail system hand off to oldest hand off,
so the origin is at the bottom of the stack of "Received:".

>
>Status: U
>Return-Path: <rmgill@realbig.co>
>Received: from imf04bis.bellsouth.net ([205.152.58.44])
> by osgood.mail.atl.earthlink.net (Earthlink Mail Service)
>with ESMTP id 17XDpp1693Nl3pt0
> for <rmgill@mindspring.com>; Fri, 4 Oct 2002 21:07:07 -0400 (EDT)
>Received: from y80dm ([209.214.56.161]) by imf04bis.bellsouth.net
> (InterMail vM.5.01.04.19 201-253-122-122-119-20020516) with SMTP
> id <20021005010803.NLQI9822.imf04bis.bellsouth.net@y80dm>;
> Fri, 4 Oct 2002 21:08:03 -0400
>From: Ryan Gill <rmgill@realbig.co>
>Subject: Re: [MV] Who's Vehicle is it? (was: Big Brother IS
>MIME-Version: 1.0
>Content-Type: multipart/alternative; boundary="----------7WKCE7Z423U9QI5"
>Message-Id: <20021005010803.NLQI9822.imf04bis.bellsouth.net@y80dm>
>Date: Fri, 4 Oct 2002 21:08:33 -0400

-- 
--
Ryan Gill              rmgill@SPAMmindspring.com
----------------------------------------------------------
      |        |                   |         -==----      
      | O--=-  |                   |        /_8[*]°_\     
      |_/|o|_\_|       | _________ |        /_[===]_\     
      / 00DA61 \       |/---------\|     __/         \--- 
   _w/|=_[__]_= \w_    // [_]  o[]\\   _oO_\         /_O|_
  |: O(4) ==    O :|  _Oo\=======/_O_  |____\       /____|
  |---\________/---|  [__O_______W__]   |x||_\     /_||x| 
   |s|\        /|s|   |s|/BSV 575\|s|   |x|-\|     |/-|x| 
   |s|=\______/=|s|   |s|=|_____|=|s|   |x|--|_____|--|x| 
   |s|          |s|   |s|         |s|   |x|           |x| 
'60 Daimler Ferret '42 Daimler Dingo '42 Humber MkIV (1/3)
----------------------------------------------------------


This archive was generated by hypermail 2.1.4 : Wed Apr 23 2003 - 13:24:05 PDT