dcom worm - curious

Stephen J. Wilcox steve at telecomplete.co.uk
Thu Aug 14 11:43:45 UTC 2003



Got a few emails in with the Mimail worm attached, the thing is who is sending 
them as these are not email addresses/domain names that I use altho they do 
exist in some old websites that are still live.

Is someone spidering and spamming out this worm or something??

Steve

------------------------- BEGIN HEADERS -----------------------------
Received: from mail-0.telecomplete.net ([193.0.249.4] helo=mail.telecomplete.net)
	by mx-0.telecomplete.net with esmtp (Exim 4.10)
	id 19nGAW-0003Gn-00
	for rjnr at thedogsbollocks.co.uk; Thu, 14 Aug 2003 11:21:24 +0000
Received: from [203.122.2.209] (helo=localhost)
	by mail.telecomplete.net with smtp (Exim 4.20)
	id 19nGAH-0005Hi-Tj
	for rjnr at thedogsbollocks.co.uk; Thu, 14 Aug 2003 12:21:14 +0100
From: admin at thedogsbollocks.co.uk
To: Rjnr <rjnr at thedogsbollocks.co.uk>
Reply-To: admin at thedogsbollocks.co.uk
X-Mailer: The Bat! (v1.61)
X-Priority: 2 (High)
Subject: your account                         rspdhjri
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------FC242CEF000E8E3"
Message-Id: <E19nGAH-0005Hi-Tj at mail.telecomplete.net>
Date: Thu, 14 Aug 2003 12:21:14 +0100
-------------------------- END HEADERS ------------------------------





More information about the NANOG mailing list