Unregistered
08-20-2003, 02:09 PM
Greeting
I found a mystical site when searching with word sobigf
that is a name of a virus that spreads right now worldwide.
On that site appears to be codes, and one of them is identical
to that word sobigf. I also found a word omni in both message
ID of contaminated email and the name of that website.
Here a copy of contaminated email... :
From :
Mail Delivery Subsystem <MAILER-DAEMON@perkunas1.omnitel.net>
To :
Subject :
Returned mail: see transcript for details
Date :
Wed, 20 Aug 2003 07:16:48 +0300
Attachment : thank_you.pif (100k)
MIME-Version: 1.0
Received: from perkunas1.omnitel.net ([194.176.32.98]) by mc6-f16.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Tue, 19 Aug 2003 21:16:49 -0700
Received: from localhost (localhost)by perkunas1.omnitel.net (8.11.6/8.9.3) id h7K4Gmm02601;Wed, 20 Aug 2003 07:16:48 +0300
X-Message-Info: JGTYoYF78jEHjJx36Oi8+YDSEg8qKPPD
Message-Id: <200308200416.h7K4Gmm02601@perkunas1.omnitel.net>
Auto-Submitted: auto-generated (failure)
Return-Path: <>
X-OriginalArrivalTime: 20 Aug 2003 04:16:49.0684 (UTC) FILETIME=[E07AAD40:01C366D1]
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version
The original message was received at Wed, 20 Aug 2003 07:16:45 +0300
from [194.215.80.18]
----- The following addresses had permanent fatal errors -----
<ieva.per@ukmerge.omnitel.net>
(reason: can't create (user) output file)
----- Transcript of session follows -----
procmail: Quota exceeded while writing "/var/spool/mail/0002796"
550 5.0.0 <ieva.per@ukmerge.omnitel.net>... Can't create output
Reporting-MTA: dns; perkunas1.omnitel.net
Received-From-MTA: DNS; [194.215.80.18]
Arrival-Date: Wed, 20 Aug 2003 07:16:45 +0300
Final-Recipient: RFC822; ieva.per@ukmerge.omnitel.net
Action: failed
Status: 5.3.0
Diagnostic-Code: X-Unix; 73
Last-Attempt-Date: Wed, 20 Aug 2003 07:16:48 +0300
From :
To :
<ieva.per@ukmerge.omnitel.net>
Subject :
Your details
Date :
Wed, 20 Aug 2003 7:33:55 +0300
Attachment : thank_you.pif (100k)
MIME-Version: 1.0
Received: from KOLDSK01 ([194.215.80.18])by perkunas1.omnitel.net (8.11.6/8.9.3) with SMTP id h7K4Gjm02600for <ieva.per@ukmerge.omnitel.net>; Wed, 20 Aug 2003 07:16:45 +0300
Return-Path: <rainovelin@hotmail.com>
Message-Id: <200308200416.h7K4Gjm02600@perkunas1.omnitel.net>
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
Please see the attached file for details.
Notice: Attachments are automatically scanned for viruses using
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Previous Next | Close
...and here a sample from that website:
q=cache:VtbXCh0QnuIJ:www.omniscient.com.au/upgrade/ted/tasmodul.txt+soBigF&hl=fi&ie=UTF-8
"NOWORKASS","Workwise-Assertiveness and Communication","120599",
"GE305","MANAGING GROUP PROBLEM SOLVING AND DECISION MAKING","120599",
"GENPCD201","ACCESS EMPLOYMENT AND TRAINING OPTIONS","120599",
"NBB05","QUALITY CONCEPTS","039999",
"65491","Strategies For Teaching English To Speakers Of Other Lang's","070115",
"TSL008","RESOURCES AND TESTING INSTRUMENTS","070115",
"TSL009","PRACTICE TEACHING: DESIGN, DELIVERY AND REVIEW","070115",
"TSL007","INTRODUCTION TO THE FOUR MACRO SKILLS","070115",
"SOBIEG","Improve Your English Grammar","091501",
"SOBIGF","Improve your Grammar - Intermediate","091501",
"TSL006","GRAMMAR APPLICATIONS","091501",
"SOICCR","Introduction to Cryptic Crosswords","091501",
"BUGRAMMAR","Improve your English Grammar","091501",
"CWM003","Introduction To Solid Waste Handling Equipment","039901",
"ABJ502","INTRODUCTION TO SOLID WASTE HANDLING EQUIPMENT","039901",
"ABJ503","RECEIVING AND DISPATCHING WASTE","039901",
"48718","SOLID WASTE MANAGEMENT","039901",
"EB854","STORM WATER DRAINAGE","039901",
There may not be any other connection between these two but
the uncommonness, nevertheless, it is interesting.
all the best to you
Maria
I found a mystical site when searching with word sobigf
that is a name of a virus that spreads right now worldwide.
On that site appears to be codes, and one of them is identical
to that word sobigf. I also found a word omni in both message
ID of contaminated email and the name of that website.
Here a copy of contaminated email... :
From :
Mail Delivery Subsystem <MAILER-DAEMON@perkunas1.omnitel.net>
To :
Subject :
Returned mail: see transcript for details
Date :
Wed, 20 Aug 2003 07:16:48 +0300
Attachment : thank_you.pif (100k)
MIME-Version: 1.0
Received: from perkunas1.omnitel.net ([194.176.32.98]) by mc6-f16.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Tue, 19 Aug 2003 21:16:49 -0700
Received: from localhost (localhost)by perkunas1.omnitel.net (8.11.6/8.9.3) id h7K4Gmm02601;Wed, 20 Aug 2003 07:16:48 +0300
X-Message-Info: JGTYoYF78jEHjJx36Oi8+YDSEg8qKPPD
Message-Id: <200308200416.h7K4Gmm02601@perkunas1.omnitel.net>
Auto-Submitted: auto-generated (failure)
Return-Path: <>
X-OriginalArrivalTime: 20 Aug 2003 04:16:49.0684 (UTC) FILETIME=[E07AAD40:01C366D1]
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Printer Friendly Version
The original message was received at Wed, 20 Aug 2003 07:16:45 +0300
from [194.215.80.18]
----- The following addresses had permanent fatal errors -----
<ieva.per@ukmerge.omnitel.net>
(reason: can't create (user) output file)
----- Transcript of session follows -----
procmail: Quota exceeded while writing "/var/spool/mail/0002796"
550 5.0.0 <ieva.per@ukmerge.omnitel.net>... Can't create output
Reporting-MTA: dns; perkunas1.omnitel.net
Received-From-MTA: DNS; [194.215.80.18]
Arrival-Date: Wed, 20 Aug 2003 07:16:45 +0300
Final-Recipient: RFC822; ieva.per@ukmerge.omnitel.net
Action: failed
Status: 5.3.0
Diagnostic-Code: X-Unix; 73
Last-Attempt-Date: Wed, 20 Aug 2003 07:16:48 +0300
From :
To :
<ieva.per@ukmerge.omnitel.net>
Subject :
Your details
Date :
Wed, 20 Aug 2003 7:33:55 +0300
Attachment : thank_you.pif (100k)
MIME-Version: 1.0
Received: from KOLDSK01 ([194.215.80.18])by perkunas1.omnitel.net (8.11.6/8.9.3) with SMTP id h7K4Gjm02600for <ieva.per@ukmerge.omnitel.net>; Wed, 20 Aug 2003 07:16:45 +0300
Return-Path: <rainovelin@hotmail.com>
Message-Id: <200308200416.h7K4Gjm02600@perkunas1.omnitel.net>
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
Please see the attached file for details.
Notice: Attachments are automatically scanned for viruses using
Reply Reply All Forward Delete Put in Folder...InboxSent MessagesDraftsTrash Can Previous Next | Close
...and here a sample from that website:
q=cache:VtbXCh0QnuIJ:www.omniscient.com.au/upgrade/ted/tasmodul.txt+soBigF&hl=fi&ie=UTF-8
"NOWORKASS","Workwise-Assertiveness and Communication","120599",
"GE305","MANAGING GROUP PROBLEM SOLVING AND DECISION MAKING","120599",
"GENPCD201","ACCESS EMPLOYMENT AND TRAINING OPTIONS","120599",
"NBB05","QUALITY CONCEPTS","039999",
"65491","Strategies For Teaching English To Speakers Of Other Lang's","070115",
"TSL008","RESOURCES AND TESTING INSTRUMENTS","070115",
"TSL009","PRACTICE TEACHING: DESIGN, DELIVERY AND REVIEW","070115",
"TSL007","INTRODUCTION TO THE FOUR MACRO SKILLS","070115",
"SOBIEG","Improve Your English Grammar","091501",
"SOBIGF","Improve your Grammar - Intermediate","091501",
"TSL006","GRAMMAR APPLICATIONS","091501",
"SOICCR","Introduction to Cryptic Crosswords","091501",
"BUGRAMMAR","Improve your English Grammar","091501",
"CWM003","Introduction To Solid Waste Handling Equipment","039901",
"ABJ502","INTRODUCTION TO SOLID WASTE HANDLING EQUIPMENT","039901",
"ABJ503","RECEIVING AND DISPATCHING WASTE","039901",
"48718","SOLID WASTE MANAGEMENT","039901",
"EB854","STORM WATER DRAINAGE","039901",
There may not be any other connection between these two but
the uncommonness, nevertheless, it is interesting.
all the best to you
Maria