Kindof Odd
Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Kindof Odd

  1. #1
    Senior Member
    Join Date
    Dec 2001
    Posts
    304

    Kindof Odd

    Its strange I log into my email today ( havent checked or sent mail in days ) and I see this

    Content-Transfer-Encoding: quoted-printable
    This message was created automatically by mail delivery software (Exim).

    A message that you sent could not be delivered to one or more of its recipients.
    This is a permanent error. The following address(es) failed:adrita@hotmail.com

    The thing is i did not send any mail to any hotmail user because i dont even know anyone who uses hotmail. Anyone know of a worm or anything that uses the address adrita@hotmail.com? I checked around a few places but came up with nothing.
    Violence breeds violence
    we need a world court
    not a republican with his hands covered in oil and military hardware lecturing us on world security!

  2. #2
    Senior Member
    Join Date
    Sep 2001
    Posts
    201
    could be a strain of klez on the email providers server. Email them to tell them of this.

  3. #3
    Senior Member
    Join Date
    Dec 2001
    Posts
    304
    thats what i was thinking. But the only thing is the server is running apache and freebsd. Isnt klez just for windows?
    Violence breeds violence
    we need a world court
    not a republican with his hands covered in oil and military hardware lecturing us on world security!

  4. #4
    Senior Member
    Join Date
    Apr 2002
    Posts
    1,049
    but doesent the klez worm spread with users on your contact list and euclid says he doesent know any 1 using hotmail
    By the sacred **** of the sacred psychedelic tibetan yeti ....We\'ll smoke the chinese out
    The 20th century pharoes have the slaves demanding work
    http://muaythaiscotland.com/

  5. #5
    Senior Member
    Join Date
    Sep 2001
    Posts
    201
    Klez is an odd worm. It doesnt have to reside on your machine! It tends to use random from addresses on one users addressbook. Therfor any failed ones get returned to you.

    No it doesnt. on some variants of it it generates random emails with well known email domains. Others picks them up from someone elkses machine. Klez has about 15 or so variants.

  6. #6
    Senior Member
    Join Date
    Apr 2002
    Posts
    1,049
    thanks for clearing that up redgore appologies my mistake sorry
    By the sacred **** of the sacred psychedelic tibetan yeti ....We\'ll smoke the chinese out
    The 20th century pharoes have the slaves demanding work
    http://muaythaiscotland.com/

  7. #7
    Senior Member
    Join Date
    Sep 2001
    Posts
    201
    Its ok!! May i suggest looking at some AV sites for klez definitions. It is an interesting worm with loads of variants

  8. #8
    Senior Member
    Join Date
    Dec 2001
    Posts
    304
    redgore, so do you think it is my computer or the mail server that is infected [if even is] or just someone that has me in their address book [and if that is the case if someone else is infected wouldnt I only get the bounced message if I or mail provider was infected] because I havent accessed my email from home in a while I mainly check at work wich is a corporate lan with its own email system. So if it was this computer or network that was infected wouldnt it most likly have sent the mail using our smtp server instead of my email provider wich i check here threw webmail?
    Violence breeds violence
    we need a world court
    not a republican with his hands covered in oil and military hardware lecturing us on world security!

  9. #9
    Senior Member
    Join Date
    Sep 2001
    Posts
    201
    Could be any of those. If its webmail its doubtful you have it. that narrows it down to the providers server or someone who has your email or a random person from anywhere in the world

  10. #10
    Senior Member
    Join Date
    Nov 2001
    Posts
    4,786
    to add to what redgore said

    klez uses a random name from the phonebooks of infected computers to use as a senders address. if the mail-to address no longer exists, it gets returned to you as the return address address listed, and not the infected machine.
    Bukhari:V3B48N826 “The Prophet said, ‘Isn’t the witness of a woman equal to half of that of a man?’ The women said, ‘Yes.’ He said, ‘This is because of the deficiency of a woman’s mind.’”

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •