Back to the Korax Forum Archives


Forum

WTF!! (Korax mail account)

Thu, 22 Jan 2004 19:16:47

Moose

I got this from the Korax mail account dilivery software:
This message was created automatically by mail delivery software. A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed: <!-- e --><a href="mailto:mago@korax-heritage.com">mago@korax-heritage.com</a><!-- e --> This message has been rejected because it has a potentially executable attachment "lqmkfss.exe" This form of attachment has been used by recent viruses or other malware. If you meant to send this file then please package it up as a zip file and resend it. ------ This is a copy of the message, including all the headers. ------ Return-path: <moose@korax-heritage.com> Received: from [193.203.8.241] (helo=kucni) by server.orcwebhosting.com with smtp (Exim 4.24) id 1AjTcP-0007hQ-7G for <!-- e --><a href="mailto:mago@korax-heritage.com">mago@korax-heritage.com</a><!-- e -->; Wed, 21 Jan 2004 18:26:51 -0700 Date: Thu, 22 Jan 2004 02:26:34 +0100 To: <!-- e --><a href="mailto:mago@korax-heritage.com">mago@korax-heritage.com</a><!-- e --> Subject: Hi From: <!-- e --><a href="mailto:moose@korax-heritage.com">moose@korax-heritage.com</a><!-- e --> Message-ID: <qqhokxcivdngophfydb@korax-heritage.com> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--------431436174821165" ----------431436174821165 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Test =) hskrtxantaiapaqv -- Test, yep. ----------431436174821165 Content-Type: application/x-msdownload; name="lqmkfss.exe" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="vvrresvigqf.exe" TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAyAAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4g RE9TIG1vZGUuDQ0KJAAAAAAAAADchu8bmOeBSJjngUiY54FImOeBSJvngUgW+JJIxeeBSGTH k0iZ54FIX+GHSJnngUhSaWNomOeBSAAAAAAAAAAAAAAAAAAAAABQRQAATAEEAN9uCkAAAAAA AAAAAOAADwELAQUMACQAAABCAAAAAAAAijEAAAAQAAAAQAAAAABAAAAQAAAAAgAABAAAAAAA AAAEAAAAA................................ etc, etc, etc and so forth.
Now I didn't send it, so could somone please explain why/how this has happened.
Thu, 22 Jan 2004 20:07:53

RambOrc

Very simple, it was one of those virus programs that grab two mail addresses from the internet and send a virus mail to one of them in the name of the other. Now that I took down all e-mail addresses from the Korax website, with time both spam and such stuff should decrease.

Back to the Korax Forum Archives