SniperXX
06-01-03, 11:25 PM
Well my web host just installed Ensim Pro on our server and its sweet! It now can block spam and the best feature I like is a builtin ANTIVIRUS!! Check out this email I got and what it said.
The title is {Virus?} {Spam?} Re: 45443-343556
Ensim Pro add the spam question part which is always dead on. :D Also it added the virus. Below is the email.
Warning: This message has had one or more attachments removed
Warning: (screensaver.scr).
Warning: Please read the "VirusWarning.txt" attachment(s) for more information.
Please see the attached file.
--------------------------------------------------------------------------------
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "screensaver.scr"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.
If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Sun Jun 1 23:54:26 2003 the virus scanner said:
Windows Screensavers are often used to hide viruses (screensaver.scr)
Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quarantine/20030601 (message h524sId28729).
--
Postmaster
Mailscanner thanks transtec Computers for their support
Here is the attachnemt Ensim put in.
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "screensaver.scr"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.
If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Sun Jun 1 23:54:26 2003 the virus scanner said:
Windows Screensavers are often used to hide viruses (screensaver.scr)
Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quarantine/20030601 (message h524sId28729).
--
Postmaster
Mailscanner thanks transtec Computers for their support
Basically its a repeat of the email. The ways I knew it was a virus was easy, especially the 1st time.
1. bill@microsoft.com is a way to general email address. Plus I dont even know a bill who works @ MS. Also, 99% of buisiness professionals put their 1st initial infront of their last name. Ex. Joe Bill would be jbill@___.com
2. Those random numbers are so you cannot really block the emails by filters. Its a easy PHP script, if they are coded well enough they also be hard to trace. They can also send tons of copies and so on. Trust me I made one just to test my coding.
3. With the PHP scripted ones you can make a fake from email so its harder to trace too, which is obviously what he did.
Dang I really hate it when some one sends me emails. :mad: :mad: I always find ways to take them down, usually by finding their IP and telling their ISP. Then the problems stop. Mwah hahahah... :D
The title is {Virus?} {Spam?} Re: 45443-343556
Ensim Pro add the spam question part which is always dead on. :D Also it added the virus. Below is the email.
Warning: This message has had one or more attachments removed
Warning: (screensaver.scr).
Warning: Please read the "VirusWarning.txt" attachment(s) for more information.
Please see the attached file.
--------------------------------------------------------------------------------
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "screensaver.scr"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.
If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Sun Jun 1 23:54:26 2003 the virus scanner said:
Windows Screensavers are often used to hide viruses (screensaver.scr)
Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quarantine/20030601 (message h524sId28729).
--
Postmaster
Mailscanner thanks transtec Computers for their support
Here is the attachnemt Ensim put in.
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "screensaver.scr"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.
If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.
At Sun Jun 1 23:54:26 2003 the virus scanner said:
Windows Screensavers are often used to hide viruses (screensaver.scr)
Note to Help Desk: Look on the MailScanner in /var/spool/MailScanner/quarantine/20030601 (message h524sId28729).
--
Postmaster
Mailscanner thanks transtec Computers for their support
Basically its a repeat of the email. The ways I knew it was a virus was easy, especially the 1st time.
1. bill@microsoft.com is a way to general email address. Plus I dont even know a bill who works @ MS. Also, 99% of buisiness professionals put their 1st initial infront of their last name. Ex. Joe Bill would be jbill@___.com
2. Those random numbers are so you cannot really block the emails by filters. Its a easy PHP script, if they are coded well enough they also be hard to trace. They can also send tons of copies and so on. Trust me I made one just to test my coding.
3. With the PHP scripted ones you can make a fake from email so its harder to trace too, which is obviously what he did.
Dang I really hate it when some one sends me emails. :mad: :mad: I always find ways to take them down, usually by finding their IP and telling their ISP. Then the problems stop. Mwah hahahah... :D