virus mails coming from saix

noswal

Executive Member
Joined
Jun 26, 2004
Messages
6,172
Reaction score
9
Location
Stranded, on Earth
Just got the following trapped in my filters, real ip it is being sent through 165.165.214.75
= saix.net :rolleyes:

From [email protected] Fri Oct 27 14:43:54 2006
Received: from [165.165.214.75] (helo=ANNETTE-PC)
Fri, 27 Oct 2006 14:43:54 -0400
Received: (qmail 2142 invoked by uid 0); Fri, 27 Oct 2006 20:39:39 -0000)
Received: from unknown (HELO cja) (10.0.0.149)
by 10.0.0.10 with SMTP; Fri, 27 Oct 2006 20:39:39 -0000
Date: Fri, 27 Oct 2006 20:34:39 +0200
From: [email protected]
Mime-Version: 1.0

Subject: Mail server report.
Content-Type: multipart/mixed;
boundary="-----------5E1B62BF447DB0F0"

-------------5E1B62BF447DB0F0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Mail server report.

Our firewall determined the e-mails containing worm copies are being sent from your computer.

Nowadays it happens from many computers, because this is a new virus type (Network Worms).


Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses

Please install updates for worm elimination and your computer restoring.

Best regards,
Customers support service

-------------5E1B62BF447DB0F0
Content-Type: APPLICATION/OCTET-STREAM; name="Update-KB312-x86.zip"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="Update-KB312-x86.zip"
 
Yea, I've been getting these to. I thought at first I had a virus, but I ran full scans on all my machines, and nothing came up - so I left it. I've only gotten about 2.

Bloody annoying.
 
Fsck that.... so that's where those bloody annoying fsckers is coming from.

Monday I'm gonna blacklist SAIX.
 
Top
Sign up to the MyBroadband newsletter
X