I know it might be Jim Weise, the man who runs the site but not sure. Thought i saw a thread about a different email? o No: Thanks in advance. My Message
Ya, Rob you may have met him at Bruce's big party. How does the infected email relate to JW? Dana uzzled:
I got the same thing a couple months ago from his email address and asked him if I had sent anything his way (involuntarily) and he said no... I dunno what it is.
Someone who was infected had Jim's e-mail in their address book. These BS viruses infect a computer and access the address book of the 'victim'. The virus replicates itself by sending to recipients in the address book from a different address book entry.
Isnt Jim who works at TriShield Performance Jim Weise? o No: Already went through that once, now i keep my address book empty, and just have a list on paper in a desk drawer.
Ya, that's my real name, at least according to my folks.. And as Marco explained, it has nothing to do with me, beyond that my email address is in someone's address book.. and at around 5000 emails a year I get here, there is a whole lot of folks who have that address. JW
When you get that type of E-mail you need to read the header information to find out where it came from. Many of the virii use addresses from the victums E-mail to hide where it actually came from. Here is the URL for a place to start in your search: ARIN WHOIS Database Search For instance the header from a newsletter from my village is displayed in Outlook Express by highlighting the file and right clicking and chosing "Properties" from the dropdown box. Then click on the "Details" tab then the "Message source" box. You should see something similiar to: Return-Path: <support@govoffice.com> Delivered-To: loyd@1 Received: (qmail 16597 invoked from network); 20 Jan 2004 22:22:50 -0000 Received: from unknown (HELO mail.avenet.net) (63.228.251.20) by hosting-132-140.phpwebhosting.com with SMTP; 20 Jan 2004 22:22:50 -0000 Received: from AVENT5 [63.228.251.120] by mail.avenet.net (SMTPD32-8.05) id AA3A38B010E; Tue, 20 Jan 2004 16:22:50 -0600 From: "www.villageofbrookfield.com" <support@govoffice.com> Copy and paste the "63.228.251.20" into the "Search For" box at ARIN WHOIS to find the source of the E-mail. The responce should look like: Search results for: 63.228.251.20 OrgName: U S WEST Internet Services OrgID: USW Address: 950 17th Street Address: Suite 1900 City: Denver StateProv: CO PostalCode: 80202 Country: US This at least rules out the apparent offender, before you go any further. Most sites have an abuse E-mail, but I have had very little luck cutting down on the 4 to 6 infected E-mails sent to my address each day. Hope this helps
I recieved that same email from 2 different people I know today. Looks like another virus is going around.
