MX-3.com • Someone has the W32.Sober.X@mm!zip virus

Someone has the W32.Sober.X@mm!zip virus

Posted: November 27th, 2005, 9:01 am

by MX-3.com

I am receiving viruses from someone who has the following IP Address:
67.8.92.175

I trace it to the following: 175-92.8-67.swfla.res.rr.com [67.8.92.175]

Which tells me they are on the rr.com network (Roadrunner??), and are connected from somwhere in SouthWest Florida?

If this is you, please clean your system. Thanks,

2 copies of the e-mail headers are below:

Received: from awfephmp.com ([67.8.92.175]) by mx-3.com with MailEnable ESMTP; Sun, 27 Nov 2005 06:18:07 -0500
From: info@aol.com
To: x-Recipient@mx-3.com
Date: Sun, 27 Nov 2005 11:12:35 UTC
Subject: smtp mail failed
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <b6aef484c6db.b7ce38@ewymyfckj.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="9ba1ec41af821cbd151ba"
Content-Transfer-Encoding: 7bit
This is a multi-part message in MIME format.

Received: from diaatmal.com ([67.8.92.175]) by mx-3.com with MailEnable ESMTP; Sat, 26 Nov 2005 01:12:10 -0500
From: postman@aol.com
To: jeff@mx-3.com
Date: Sat, 26 Nov 2005 06:12:37 GMT
Subject: smtp mail failed
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <39a8cdef9db74aa79d@gggitwbp.com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="==a0ba80e8.fdc9aeb2f78d"
Content-Transfer-Encoding: 7bit
This is a multi-part message in MIME format.

Thanks,

Posted: November 12th, 2006, 12:19 am

by jschrauwen

RoadRunner is a popular front end choice used by CarPC types , like me.

http://www.mp3car.com/vbulletin/forumdisplay.php?f=72

Posted: November 12th, 2006, 4:29 am

by MX-3.com

But this thread is almost a year old..... You must have been using the sites search features!