13-03-2004, 17:22
|
#1
|
|
cf.addict
Join Date: Jun 2003
Posts: 425
|
Virus infect user
I have been receiving dozens of virus infected emails from a northampton cable modem user (every day for the last couple of weeks), how do I tell him?
Headers include
Quote:
Received: from ntlworld.com ([81.107.108.242]) by mta04-svc.ntlworld.com
(InterMail vM.4.01.03.37 201-229-121-137-20020806) with ESMTP
id <20040313163821.CSXC4168.mta04-svc.ntlworld.com@ntlworld.com>
|
cpc3-nthc2-4-0-cust242.nrth.cable.ntl.com [81.107.108.242]
The IP resolves to, he is online now without a firewall?
I reported dozens to
http://www.ntlworld.com/netreport/
but they are presumably too busy to care?
|
|
|
|
13-03-2004, 17:25
|
#2
|
|
cf.mega poster
Join Date: Jun 2003
Posts: 4,845
|
Re: Virus infect user
__________________
Read this for a I-Web domain hosted update.
|
|
|
|
|
13-03-2004, 17:32
|
#3
|
|
cf.addict
Join Date: Jun 2003
Posts: 425
|
Re: Virus infect user
Quote:
|
Originally Posted by Caspar
|
Tried that, the standard message gave the above web form as a better route!
|
|
|
|
|
13-03-2004, 17:58
|
#4
|
|
It wasn't me
Join Date: Jun 2003
Location: Manchester 23
Age: 48
Services: VIP pack 20Mb most of the time.
Posts: 1,777
|
Re: Virus infect user
have you tried sending one back to them?
__________________
Just Being Myself
|
|
|
|
|
13-03-2004, 18:05
|
#5
|
|
Permanently Banned
Join Date: Jun 2003
Location: norton , teesside
Age: 40
Posts: 10,571
|
Re: Virus infect user
|
|
|
|
|
13-03-2004, 18:42
|
#6
|
|
I've been here before?
Join Date: Jun 2003
Location: I am house...
Services: $KY+, Vodafone USB Stick Broadband!
Posts: 2,212
|
Re: Virus infect user
at a guess they are running a mail server and someone is using his server to bounce mails - happened to a mate of mine and he never noticed until he spotted is bandwidth being hammered!
__________________
There are only 10 types of people in the world: Those who understand binary and those who don't...
Better Hosting packages? - I'd offer you a deal and my domain is now up 
|
|
|
|
|
13-03-2004, 20:54
|
#7
|
|
cf.addict
Join Date: Jun 2003
Posts: 425
|
Re: Virus infect user
Quote:
|
Originally Posted by swoop101
have you tried sending one back to them?
|
The email addresses and hostname are fake, but I believe the IP address added by the ntl mailserver is correct.
I've just had another 4 copies of the virus from a Luton cable modem now, someone else in this friend of a friend network must have been infected!
|
|
|
|
|
15-03-2004, 22:27
|
#8
|
|
cf.addict
Join Date: Jun 2003
Posts: 425
|
Re: Virus infect user
Quote:
|
Originally Posted by Tricky
at a guess they are running a mail server and someone is using his server to bounce mails - happened to a mate of mine and he never noticed until he spotted is bandwidth being hammered!
|
Well posting the IP in here has done the trick - coincidence?
Now several copies a day from what I think is hong-kong, don't suppose I can blame an ntl customer for that!
Quote:
Received: from bigfoot.com ([218.189.242.15])
by BFLITEMAIL-KR1.bigfoot.com (LiteMail v3.03(BFLITEMAIL-KR1)) with SMTP id 0403142049_BFLITEMAIL-KR1_230447_20708265;
Sun, 14 Mar 2004 20:55:58 -0500 EST
|
Spamcop says they are from hgcbroadband.com
|
|
|
|
|
16-03-2004, 00:36
|
#9
|
|
Busy Admin
Join Date: Oct 2003
Location: Nottingham
Age: 45
Services: VM Phone : Sky+ Multiroom : VM Cable (20 Mbps)
Posts: 14,475
|
Re: Virus infect user
Who do you know in hong kong then ......
__________________
 Click here for a real, interactive, tv guide.
|
|
|
|
|
16-03-2004, 00:44
|
#10
|
|
International Megastar
Join Date: Jun 2003
Location: Nottingham
Age: 52
Posts: 1,382
|
Re: Virus infect user
Quote:
|
Originally Posted by pem
Who do you know in hong kong then ......
|
My ex signed up with a Honk Kong provider
I assume so anyway - the content of her mail was from KowLoon
|
|
|
|
|
16-03-2004, 00:57
|
#11
|
|
cf.mega pornstar
Join Date: Jun 2003
Posts: 10,232
|
Re: Virus infect user
Quote:
|
Originally Posted by Nikko
My ex signed up with a Honk Kong provider
I assume so anyway - the content of her mail was from KowLoon
|
So which one was it? The jade market, the night market, the birds market or the ladies market? 
__________________
Oh Oh Ranje 
We houden allemaal van jou, de spelers en het rood wit blauw.
------------------------------------------------------------------------
I wish I knew where I was going, cause I have to get back as well.
Last edited by danielf; 16-03-2004 at 00:59.
|
|
|
|
|
16-03-2004, 01:04
|
#12
|
|
International Megastar
Join Date: Jun 2003
Location: Nottingham
Age: 52
Posts: 1,382
|
Re: Virus infect user
Quote:
|
Originally Posted by danielf
So which one was it? The jade market, the night market, the birds market or the ladies market? |
I think you have it there in reverse order - culminating in the flea market
|
|
|
|
|
16-03-2004, 18:08
|
#13
|
|
cf.addict
Join Date: Jun 2003
Posts: 425
|
Re: Virus infect user
Quote:
|
Originally Posted by pem
Who do you know in hong kong then ......
|
The only thing I can think is that I was recently sent a webmail by a mate on holiday there. Wouldn't put it past a dodgy internet cafe to cache the email addresses?
Or it could have been one of those joke emails I passed on, and a few generations later its stored on a PC that gets infected.
|
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +1. The time now is 21:51.
|
Join CF
You are here: 
