I have had a lot of returned mail and reports of people getting e-mail from “webmaster@heavensbest.com” with spyware or virus’s in them. They contain the subject
Subject: Update account information
OR
Subject: Harrye
OR
Subject: Alert! 2006 Bank SSL Server Upgrade
OR
Subject: Security Measures
Please be aware that this is NOT coming from the corperate office. These are rogue attackes from an outside source.
Attackers:
pw-conf@midamerica.com <- Spoofed
1550650527.20060628215045@midamerica.com <- Spoofed
glacierdayz.com
angie@heavensent.uk.com <- spoofed
adsl-69-234-157-191.dsl.irvnca.pacbell.net
ns31535.ovh.net
20060629083154.13934.qmail@ns31535.ovh.net
gorrellfineart.com
glores.com
org51-1-82-226-143-212.fbx.proxad.net
Bad Attachments (which contain Worm.Bagle.Gen-zippwd-9):
joqvohrmej.gif
Androw.zip