The Spammer Is At It Again.
Sam Schinke
those out, as well as about the resulting complaints and any reputation
damage. :( )
The funniest thing of all, of course, is the fact that these spam mails will
probably _improve_ TDS sales, as a portion of the mail recipients will
undoubtedly click through. I guess their reputation could take a hit, though
*sigh*.
Due to their forged nature, none of the complaints about the mails will
result in repurcussions to either Wayne, abujamal, or pchelp.
Whoever is initiating these mails, obviously intends to try to hurt TDS.
Given that their mailings will likely improve revenues over at DiamondCS, I
have to consider their intelligence in a poor light.
*laughing and laughing*
Sam
abujamal
pchelp wrote:
> The sender is ... sending another batch of forged spam
> advertising TDS, this time with my email address forged as the source.
Okay, but how are these returning to you and to me? I don't see your
email address in the headers, and mine isn't in the headers I've been
getting. But they're going from the Hong Kong server to zcarmag and
then to me, on a return path that I don't find anywhere. Have they set
up something in Hong Kong to bounce returns to us?
I think they want attention.
was-salaam,
abujamal
--
PCHelpers: Putting the "Personal" into "Personal Computers"
and closing the door on the tyranny of ignorance.
PCHelpers International: http://www.pchelpers.org/
news://news.pchelponline.org mailto:pche...@pchelpers.org
Sam Schinke
"abujamal" <mus...@earthlink.net> wrote in message
news:3AE67F64...@earthlink.net...
> Salaam!
>
> pchelp wrote:
>
> > The sender is ... sending another batch of forged spam
> > advertising TDS, this time with my email address forged as the source.
>
> Okay, but how are these returning to you and to me? I don't see your
> email address in the headers, and mine isn't in the headers I've been
> getting. But they're going from the Hong Kong server to zcarmag and
> then to me, on a return path that I don't find anywhere. Have they set
> up something in Hong Kong to bounce returns to us?
My guess is that the wa...@kyelinux.kyelinux.geniusnet.com.hk (in the case
of the header pchelp posted) is set up to either bounce or relay any
messages sent to it to his email address. Maybe the server/mailer has a
bounce "notify" option?
Is the address in the headers of the bounces sent to you any different,
abujamal? If not, it is possible it is sending the same messages to both of
you.
Test it out with a short message from a throw-away, and you'll be able to
see if this is the case.
> I think they want attention.
No kidding. Like poorly behaved little children do sometimes.
Sam
abujamal
pchelp wrote:
> And Abujamal? He's printing all his out and
> filing them as amicus curae briefs!
LOL! Just broke 1600 and there's the bell again! I'm just letting
it auto-fetch, I'm going to lay down for a while.
> pchelp
abujamal
pchelp wrote:
> Possible, but I don't think so. Abujamal is getting about
> twice as many as I am. If he's getting two of each though,
> that might explain it.
1950 with 280 more coming in. I think the headers are basically the
same, somebody@localhost sending to the IP and they're bouncing from
there to here.
Do you think this mental midget imagines he's making a problem?
Hilarious.
> pchelp
pchelp
I posted a short time ago in reply to Abujamal; he and I had both
received a group of six identical threatening emails, which had similar
header characteristics to the forged "Wayne/TDS" spam.
I created a mail filter for that, and now I'm glad I did. The sender is
now carrying out his threat, sending another batch of forged spam
advertising TDS, this time with my email address forged as the source.
As I write this, the spammer is executing a mass email. I have 147
emails in the "dump" I created, and my mail reader is presently
downloading a batch of 240 more; most of them error messages like this
one, generated by bad addresses in the spammer's list:
Received: by butch.nwinternet.com (mbox pchelp)
(with Cubic Circle's cucipop (v1.31 1998/05/13) Tue Apr 24 22:54:30
2001)
X-From_: MAILER...@butch.nwinternet.com Tue Apr 24 22:50:15 2001
Return-Path: <>
Received: from kyelinux.kyelinux.geniusnet.com.hk ([202.64.222.188])
by butch.nwinternet.com (8.9.3/8.9.3) with ESMTP id WAA01380
for <pch...@nwi.net>; Tue, 24 Apr 2001 22:50:13 -0700
Received: from localhost (localhost)
by kyelinux.kyelinux.geniusnet.com.hk (8.11.0/8.11.0) id
f3P7lA426038;
Wed, 25 Apr 2001 15:47:10 +0800
Date: Wed, 25 Apr 2001 15:47:10 +0800
From: Mail Delivery Subsystem
<MAILER...@kyelinux.kyelinux.geniusnet.com.hk>
Message-Id:
<200104250747...@kyelinux.kyelinux.geniusnet.com.hk>
To: wa...@kyelinux.kyelinux.geniusnet.com.hk
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="f3P7lA426038.988184830/kyelinux.kyelinux.geniusnet.com.hk"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
The original message was received at Wed, 25 Apr 2001 15:47:07 +0800
from wayne@localhost
----- The following addresses had permanent fatal errors -----
TMar...@aol.com
(reason: 550 REQUESTED ACTION NOT TAKEN: DNS FAILURE)
----- Transcript of session follows -----
... while talking to mailin-01.mx.aol.com.:
>>> MAIL From:<wa...@kyelinux.kyelinux.geniusnet.com.hk>
<<< 550 REQUESTED ACTION NOT TAKEN: DNS FAILURE
554 5.0.0 TMar...@aol.com... Service unavailable
Reporting-MTA: dns; kyelinux.kyelinux.geniusnet.com.hk
Arrival-Date: Wed, 25 Apr 2001 15:47:07 +0800
Final-Recipient: RFC822; TMar...@aol.com
Action: failed
Status: 5.0.0
Diagnostic-Code: SMTP; 550 REQUESTED ACTION NOT TAKEN: DNS FAILURE
Last-Attempt-Date: Wed, 25 Apr 2001 15:47:10 +0800
Return-Path: <wayne>
Received: (from wayne@localhost)
by kyelinux.kyelinux.geniusnet.com.hk (8.11.0/8.11.0) id
f3P7l7526036
for TMar...@aol.com; Wed, 25 Apr 2001 15:47:07 +0800
Date: Wed, 25 Apr 2001 15:47:07 +0800
From: wayne
Message-Id:
<200104250747...@kyelinux.kyelinux.geniusnet.com.hk>
Reply-to: From: To:TMar...@aol.com
Subject: Sales Offer - TDS The Worlds Best Trojan Detection
Protect yourself from Lame, Wanna-bee hackers
and crackers. You know the kind, the people
that sit there all day with nothin better to
do but try and hack into your computers, the
lazy ass worthless, scum of the earth worthless
punks. TDS has been specially designed to keep
these low life people out of your computer once
and for good!
I am sure that you are already aware of our product
the Trojan Defense Suite ( TDS ) found on our webpage
at http://tds.diamondcs.com.au/ We have been
protecting the Internet community ever since the
beginning from malicious Trojans and Worms and other
hostile programs.
If you have not yet purchased our program as a special
thankyou for buying now I will give you a 20% discount
on the software which means you will only pay $39.99
for the TDS-3 Full Release or only $31.99 for our
TDS-3 Beta 4 version. This represents a saving to
you of $10 and $8 respectively. Just click on the
link above and purchase some security and peace of
mind. The best crackers know that it can't be cracked,
so don't even try! You have to buy it.
Spam Disclaimer If you wish to be removed from our list
simply reply to this message with "Remove" in the subject
line and you will be removed immediately. Please keep
in mind that this is not a spam as the CD address list
was purchased from a company that you gave permission to
recieve such emails.
Thankyou in advance
Wayne / DiamondCS
abujamal
pchelp wrote:
> Just my luck. I get on the list of a literary giant.
I just moved 12.6 mB off my Netscape drive -- moved all the spam to a
new folder, moved the file to the bigger drive, deleted the .snm file,
re-created the folder for Netscape, and now it has 1.86 mB in it.
Wait a minute, it's stopped ... well, I'm sure it will pick up
again. Meanwhile, though, I've lost count. I'll have to move it all
back around for the statistical update ... 2598 in spam01, 378 in spam,
4 in Trash, that's 2980 for now but here come some more ...
abujamal
pchelp wrote:
> OK, let's call it official. You win.
The night's still young, and the kid's on a roll. Maybe he'll amuse
some of these folks who feel left out.
> Besides, I have 28 gigs of free space here. I don't even
> have to move files around. Can't even complain or nothin'.
I like to shift stuff around, my 30+ gigs are in a dozen or so
partitions. I move stuff so that it doesn't take as long for Netscape
to compress the folders.
Oops ... 23 more. Hardly worth counting, if they were fish I'd throw
them back in.
davidovv
abujamal <mus...@earthlink.net> wrote:
>Salaam!
>
>pchelp wrote:
>
>> OK, let's call it official. You win.
>
> The night's still young, and the kid's on a roll. Maybe he'll
amuse
>some of these folks who feel left out.
>
>> Besides, I have 28 gigs of free space here. I don't even
>> have to move files around. Can't even complain or nothin'.
>
> I like to shift stuff around, my 30+ gigs are in a dozen or
so
>partitions. I move stuff so that it doesn't take as long for
Netscape
>to compress the folders.
>
> Oops ... 23 more. Hardly worth counting, if they were fish
I'd throw
>them back in.
>
>> pchelp
>
>was-salaam,
>abujamal
>--
Nope; I win - for the moment: 25 MB - filters in place now. Didn't
set them up after the first round (foolish).
regards,
davidovv
http://www.wilders.org
Robert Wycoff
"davidovv" <webm...@wilders.org> wrote in message
news:wuUEewXz...@colossus.SMG...
> Nope; I win - for the moment: 25 MB - filters in place now. Didn't
> set them up after the first round (foolish).
David,
How did you get on their list?
--
«
--
Robert
grc.com forum FAQ - http://grc.com/discussions.htm
grc.com forum quick reference - http://grc.com/nntpquickref.htm
grc.com forum disclaimer - http://grc.com/forumdisclaimer.htm