PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Re:, Site changes und From:Mr.Martins



JuergenNRW
31.10.2004, 16:22
Bekomme täglich trotz Firewall und anderen Tools diese drei Spam-Mails.
Return-path: <woerd-barneveld [at] export.nl>
Envelope-to: xxxxxxxxxxxxxxxxx.de
Delivery-date: Mon, 01 Nov 2004 xx:xx:xx +0100
Received: from [217.224.30.19] (helo=resin_33_nb.org)
by mxng21.kundenserver.de with smtp (Exim 3.35 #1)
ID: [ID filtered]
for xxxxxxxxxxxxxxx.de; Mon, 01 Nov 2004 xx:xx:xx +0100
Date: Mon, 01 Nov 2004 xx:xx:xx +0100
To: "" <xxxxxxxxxxxxxxxxxx.de>
From: "Woerd-barneveld" <woerd-barneveld [at] export.nl>
Subject: Re:
Message-ID: [ID filtered]
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------iinsmwpzncuismtsvtgd"
X-RBL-Warning: (dialup.bl.kundenserver.de) This mail has been received from a dialup host.
----------iinsmwpzncuismtsvtgd
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
<html><body>
:))
<br>
</body></html>
----------iinsmwpzncuismtsvtgd
Content-Type: application/octet-stream; name="Price.com"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Price.com"
-----------------------------------------------------------------------------------------------------------------
Nummer 2:
Return-path: <ebinder [at] emag.de>
Envelope-to: xxxxxxxxxxxxxxxxxxxx.de
Delivery-date: Mon, 01 Nov 2004 xx:xx:xx +0100
Received: from [212.160.183.227] (helo=vosik.net)
by mxng12.kundenserver.de with smtp (Exim 3.35 #1)
ID: [ID filtered]
for xxxxxxxxxxxxx.de; Mon, 01 Nov 2004 xx:xx:xx +0100
Date: Mon, 01 Nov 2004 xx:xx:xx +0100
To: "" <xxxxxxxxxxxxxxxxxxxxxx.de>
From: "Ebinder" <ebinder [at] emag.de>
Subject: Site changes
Message-ID: [ID filtered]
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------gzpuspjsgtlgtmkphrws"
----------gzpuspjsgtlgtmkphrws
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
<html><body>

<br>
</body></html>
----------gzpuspjsgtlgtmkphrws
Content-Type: application/octet-stream; name="Nervous_illnesses.scr"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Nervous_illnesses.scr"
----------------------------------------------------------------------------------------------------------------
Nummer 3:
Return-path: <martins77777 [at] walla.com>
Envelope-to: xxxxxxxxxxxxxxxxxxxxx.de
Delivery-date: Mon, 01 Nov 2004 xx:xx:xx +0100
Received: from [192.118.71.129] (helo=omail9.walla.co.il)
by mxng21.kundenserver.de with esmtp (Exim 3.35 #1)
ID: [ID filtered]
Date: Mon, 1 Nov 2004 xx:xx:xx +0200
Received: from ([81.199.108.8])
by omail1.walla.co.il ([192.118.71.123]) with HTTP;
Mon, 01 Nov 2004 xx:xx:xx +0300
From: =?UTF-8?Q?=6D=61=72=74=69=6E=73=20=62=61=6B=61=72=65?= <martins77777 [at] walla.com>
X-Sender: martins77777 [at] walla.com
X-Originating-Email: [martins77777 [at] walla.com]
X-Originating-IP: [81.199.108.8]
To: <poor [at] spamvictim.tld>
Subject: =?UTF-8?Q?=46=52=4F=4D=3A=20=4D=52=20=2E=20=4D=41=52=54=49=4E=53=20=20=28=49=4E=56=45= 53=54=4D=45=4E=54=20=50=52=4F=50=4F=53=41=4C=29?=
Message-ID: [ID filtered]
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="------=_EREZ_P_WallaMail_32089_9136_P_0"
--------=_EREZ_P_WallaMail_32089_9136_P_0
Content-Type: multipart/alternative; boundary="------=_EREZ_P_WallaMail_27982_1247_P_1"
--------=_EREZ_P_WallaMail_27982_1247_P_1
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: base64
Wie kriege ich diese Biester wieder los und woher kommen sie?
Kenne mich leider mit dieser Materie gar nicht aus!
Danke für Tipps und Infos vorab!!!!!

schara56
31.10.2004, 17:13
1. Mail:
Received: from [217.224.30.19] (helo=resin_33_nb.org) -> 217.224.30.19 Beschwerde an abuse[at]t-ipnet.de / abuse[at]t-online.de
2. Mail:
Received: from [212.160.183.227] (helo=vosik.net) -> 212.160.183.227 Beschwerde an abuse[at]tpnet.pl
3. Mail:
Received: from ([81.199.108.8])by omail1.walla.co.il ([192.118.71.123]) with HTTP -> 81.199.108.8 Beschwerde an abuse[at]ipplanet.net
- T-Online/T-IPNet wird erfahrungsgemäß schnell reagieren
- Mit TPNet aus Polen habe ich keine Erfahrungen gemacht
- Mit IPPlanet.net auch noch keine Erfahrungswerte

mink
31.10.2004, 21:25
finger weg vom attachment :
Filename: Nervous_illnesses.scr
Virus name: W32/Bagle.ab at MMhttp://img.homepagemodules.de/death.gif