virus mailing - anyone else?

[noswal]

This was caught in my mail checker, anyone else?
of course there is no SENTECHSA- Anti_Virus Service !!!
and this To address ([email protected]) is not me, so how did it get to me?


Return-Path: <[email protected]>
Received: from [196.7.196.54] (HELO wectamnb.cz)
by mail01.infosat.net (CommuniGate Pro SMTP 4.1.8)
with SMTP id 526686633; Mon, 22 Nov 2004 06:59:11 +0200
From: [email protected]
To: [email protected]
Date: Mon, 22 Nov 2004 02:13:18 GMT
Subject: Registration confirmation
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=====8ecbd8e25d.9a80bdbb"
Content-Transfer-Encoding: 7bit

This is a multi-part message in MIME format.

--=====8ecbd8e25d.9a80bdbb

Protected message is attached!


++++++ User-Service: http://www.razyr.cz
++++++ MailTo: [email protected]



*-*-* Attachment: No Virus found
*-*-* SENTECHSA- Anti_Virus Service
*-*-* http://www.sentechsa.com
--=====8ecbd8e25d.9a80bdbb
Content-Type: application/octet-stream; name=razyr_4030.pif
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="razyr_4030.pif"

then the file....


_________________________________________________________________________
custenna, variable 2 - 13 signal, ber 28% - 42%.<i> "I am the only one with this problem." </i>

 

[pjbmm]

Mass mailing viruses often bcc TO addresses, so even if it wasn't directly addressed to you, it bcc'ed (blind carbon copy) your address. On top of that, they spoof the return path to try and hide the source. Fortunately most can't spoof the source IP address, so the IP address on that is probably correct, which points to UUNET SA.

 

[bdn]

Yes. I've had several different ones (same style) since Thursday. I just delete them.