I heart idiots

I heart idiots

It has just been brought to my attention that someone is sending out a potential virus, changing the From: header in the email to appear as if it’s coming from [email protected].
If you have received any emails claiming to be from me, with an subject called “usample” or any other file alleging to be a README, delete it, and send an email to [email protected], since I’m pretty sure that’s the IP where the email came from.
Here’s the information I got by running the headers through Sam Spade:

Trying whois -h whois.ripe.net 194.165.169.179
% This is the RIPE Whois server.
% The objects are in RPSL format.
% Please visit http://www.ripe.net/rpsl for more information.
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-services/db/copyright.html
inetnum: 194.165.160.0 – 194.165.175.255
netname: ESATNET-ROUTE6
descr: Esat Net Consumer Dialup Modem Bank
country: IE
admin-c: CA1690
tech-c: CC1276-RIPE
tech-c: GP1184-RIPE
status: ASSIGNED PA
remarks: For SPAM/UCE complaints, please email “[email protected]”
notify: [email protected]
mnt-by: RIPE-NCC-NONE-MNT
changed: [email protected] 19991207
changed: [email protected] 20010128
source: RIPE
route: 194.165.160.0/19
descr: ESATNET-NET5
origin: AS2110
remarks: Aggregated route covering multiple Esat Net networks
mnt-by: IEUNET-NOC
changed: [email protected] 19960528
changed: [email protected] 20010423
source: RIPE
person: Colm Anderson
address: Esat Net Limited
address: 4 Westland Square
address: Pearse Street
address: Dublin 2
address: Ireland
phone: +353 1 6790832
fax-no: +353 1 6799634
e-mail: [email protected]
nic-hdl: CA1690
changed: [email protected] 19990118
source: RIPE
person: Catherine Chelmiah
address: Esat-X
address: Citywest
address: Co. Dublin
address: Ireland
phone: +353 1 432 6926
fax-no: +353 1 242 4001
e-mail: [email protected]
nic-hdl: CC1276-RIPE
notify: [email protected]
changed: [email protected] 20010823
source: RIPE
person: Gary Petticrew
address: Esat Residential Service
address: 7-13 Cardiff Lane
address: Dublin 2
address: Ireland
phone: +353 1 6724016
fax-no: +353 1 6771477
e-mail: [email protected]
nic-hdl: GP1184-RIPE
notify: [email protected]
mnt-by: IEUNET-NOC
changed: [email protected] 19981031
source: RIPE

Here’s the text of the header, with the recipient’s email removed for privacy:
“Return-Path:
Delivered-To: DELETED
Received: (qmail 27700 invoked from network); 16 Oct 2001 18:57:23 -0000
Received: from unknown (HELO D2SKR40J) (194.165.169.179)
by DELETED with SMTP; 16 Oct 2001 18:57:23 -0000
From:
Subject: usample
MIME-Version: 1.0
Content-Type: multipart/related;
type=”multipart/alternative”;
boundary=”====_ABC1234567890DEF_====”
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1″