Posted on: Sharp Co. Ar Queries Reply Here: http://genconnect.rootsweb.com/gc/USA/Ar/Sharp/10182 Surname: Buckingham, Price ------------------------- Once again the user has sent me a virus. From: Michael Buckingham ([email protected]) Sent: 26-Apr-2001 13:54:28 To: [email protected] ([email protected] com) Subject: FW: [ARSHARP] Warning One again this user has sent me a virus. I thought you fixed this problem with this user yesterday? Reference email I received from Edna: RE: CST31152997ID - CST31152997ID - Abuse. This user is deliberately sending me virii. The user is not writing text in emails, rather, the user is sending me attachments "to take a look at". This is causing a disruption of my access with my computer, constituting a denial of services attack. When my computer detects this virus I cant do anything until I figure out how to get rid of it. The user WILL cease and desist ALL attacks on me. This is unsolicited email. I do not know this user. I have never had any contact with this user. For @home staff: Request email from msn.com be blocked from entering my mailbox on mail.aurora1.co.home.com The following is submitted for your assistance in this matter: Norton Anti-Virus transcript is as follows: This file: "Sorry_about_yesterday.DOC.pif" was infected with the: "[email protected]" virus. The file was quarantined by Norton AntiVirus. Thursday, April 26, 2001 12:28 The full message header is as follows: (It has not been edited) Return-Path: Received: from h7.mail.home.com ([24.0.95.42]) by femail2.sdc1.sfba.home.com (InterMail vM.4.01.03.20 201-229-121-120-20010223) with ESMTP id for ; Thu, 26 Apr 2001 08:50:25 -0700 Received: from mx9-sfba.mail.home.com (mx9-sfba.mail.home.com [24.0.95.240]) by h7.mail.home.com (8.9.3/8.9.0) with ESMTP id IAA07512 for ; Thu, 26 Apr 2001 08:50:53 -0700 (PDT) Received: from cpimssmtpu08.email.msn.com (cpimssmtpu08.email.msn.com [207.46.181.83]) by mx9-sfba.mail.home.com (8.11.1/8.11.1) with ESMTP id f3QFoql00213 for ; Thu, 26 Apr 2001 08:50:52 -0700 (PDT) Received: from hppav ([63.28.173.214]) by cpimssmtpu08.email.msn.com with Microsoft SMTPSVC(5.0.2195.3225); Thu, 26 Apr 2001 08:50:44 -0700 Message-ID: From: "cunningham1234" To: Subject: Re: [ARSHARP] Warning MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="----=_NextPart_000_0081_01C0CE2E.20E267E0" X-Mailer: Microsoft Outlook Express 5.50.4133.2400 X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 X-OriginalArrivalTime: 26 Apr 2001 15:50:45.0337 (UTC) FILETIME=[A7CAA490:01C0CE68] Date: 26 Apr 2001 08:50:45 -0700 -----Original Message----- From: cunningham1234 [mailto:[email protected]] Sent: Thursday, April 26, 2001 9:51 AM To: [email protected] Subject: Re: [ARSHARP] Warning 'Michael Buckingham' wrote: ==== - Posted on: Sharp Co. Ar Queries - Reply Here: http://genconnect.rootsweb.com/gc/USA/Ar/Sharp/10181 - - Surname: Buckingham, Price - ------------------------- - - The follwing Individual answered this original post by sending me a virus. - The full context of his email was as follows: - - 'Michael Buckingham' wrote: - ==== - - Posted on: Sharp Co. Ar Queries - - Reply Here: http://genconnect.rootsweb.com/gc/USA/Ar/Sharp/10179 - - - - Surname: Buckingham, P ...' > Take a look to the attachment. The users ISP was traced and is as folows: # IP address Host name Round trip time 1 10.85.53.1 Unavailable 0 ms 2 24.1.8.1 bb1-ge4-0.denver1.co.home.net 0 ms 3 24.7.76.153 c1-pos3-0.dnvrco1.home.net 0 ms 4 24.7.64.93 c1-pos6-0.lnmtco1.home.net 0 ms 5 24.7.65.149 c1-pos1-0.chcgil1.home.net 21 ms 6 137.39.52.105 ATM3-0.BR2.CHI2.ALTER.NET 20 ms 7 152.63.67.246 0.so-5-1-0.XL2.CHI2.ALTER.NET 20 ms 8 152.63.67.134 0.so-7-0-0.XR2.CHI2.ALTER.NET 20 ms 9 152.63.15.134 0.so-3-0-0.TR2.CHI2.ALTER.NET 20 ms 10 152.63.1.134 126.at-5-1-0.TR2.LAX9.ALTER.NET 60 ms 11 137.39.4.207 lo0.XR2.LAX9.ALTER.NET 60 ms 12 152.63.114.133 190.at-3-0-0.HR2.LAX9.ALTER.NET 60 ms 13 152.63.112.53 112.ATM11-0-0.DR1.LAX2.ALTER.NET 60 ms 14 206.115.153.129 tnt1.banning.ca.da.uu.net 70 ms 15 63.28.173.214 1Cust214.tnt1.banning.ca.da.uu.net 200 ms I have contacted his/her ISP at [email protected]