Search:

its a pretty clever idea for a site but its the sort of place that to get anything useful out of it you have to stump up the subscription. Im sure they're making lots of money.

cut and paste? not really cos the email bodies are images which are included, encoded inside the email. have uploaded pictures of the original emails and linked them on post above.

i've noticed all (the ones i'm getting atm) are the work of the same dude (group). they can be identified because they all run from a folder called "rock". often there are multiple scams runing from...

this i read today might interest you
http://www.theregister.co.uk/2005/12/06/failed_virus_attack/

that's true. i've got a honeywall bootable cd I could try now that I think about it.
I'm having trouble with NAT atm so until that works...

well the host machine is firewalled with the same security internally and externally. turned off "trusted network" options and microsoft networking is totally disabled., otherwise i wouldnt be able...

I understand. Though I'm not going to give up quite yet. I am acutely aware of security concerns. I've just been pondering the implications of port forwarding and I realise in making it secure...

well as it is now, althought it isnt doing what i want, i can't be turned into a spamrelay because the virtual pc doesnt have access to the net as such. only incoming connections to port 445 or port...

well i normally use a kfsensor but it's not hugely useful when it comes to worms.

I set it up because i wanted to to capture those new upp exploting worms bobax and the other one but it's...

this is what i have:

a hardened xp pro install using DSL modem and kerio personal firewall. Virtual pc installed with a standard xp pro install using the virtual switch networking option.

i...

those are the sasser.e ports
not seeing much on them.

i got the dabber backdoor open on my honeypot, port 9898, but i dont sem to be picking anything up other than port scans atm.

a lot of the mitglieder trojans dropped by bagel have smtp relaying capabilities.

I'd get a more 'obvious whats going on' firewall such as kerio or sygate. both do free personal firewalls.

fancy being at the forefront of worm detection?

I read about a honeypot called wormradar that opens a bunch of ports on your pc and attempts to match incoming connections with known worm attacks...

I use kfsensor. I agree on the watching connections bit. Mostly it runs as a spam trap and that isnt wildly interesting.

I caught someone trying to send fake aol billing messages from a russian...