回 ACSite.NET 首頁
回 ACSite.NET 首頁 客服系統 帳務系統 英文首頁
nav_seperator
nav_seperator
nav_seperator
nav_seperator
 

頁: [1]
  列印  
作者 主題: 請問這2封EMAIL真的是從CP7發的嗎?  (閱讀 4140 次)
oudie
客戶
**
離線 離線

文章: 92


« 於: 三月 11, 2004, 01:16:16 am »

我收到2封含附加檔案的郵件,內容如下
主旨:Important notify about your e-mail account.
程式碼:
Dear  user of e-mail server xxx",

Some  of  our clients complained about the spam (negative  e-mail content)
outgoing  from your e-mail account. Probably,  you have been infected by
a proxy-relay trojan server. In order to keep your computer safe,
follow the instructions.

For details  see  the  attached file.

For  security reasons attached file is password  protected. The password  is "35326".

Cheers,
   The  xxx.net team                                  http://www.xxx


郵件檔頭如下
程式碼:
Return-path: <12.3993.1376349@edmdb.yam.com>
Envelope-to: 5d820582d4868cb4150dcc2cfa107640@xxx.net
Delivery-date: Thu, 04 Mar 2004 03:10:44 -0600
Received: from [140.112.250.xxx] (helo=kaola)
 by cp7.secserverpros.com
 with smtp (Exim 4.24) id 1AyosN-0003xf-Ie for 5d820582d4868cb4150dcc2cfa107640@xxx.net;
 Thu, 04 Mar 2004 03:10:43 -0600
Date: Thu, 04 Mar 2004 17:10:27 +0800
To: 5d820582d4868cb4150dcc2cfa107640@xxx.net
Subject: Important notify about your e-mail account.
From: xxx@xxx.net
Message-ID: <uktcosphdjgqcpddrin@xxx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--------wkseiafaicwcfyuegtck"



主旨:Notify about your e-mail account utilization.
引用
Dear&nbsp; user of xxx.net&nbsp; gateway&nbsp; e-mail server,

We warn you about&nbsp; some&nbsp; attacks on your e-mail&nbsp; account. Your computer may
contain viruses, in order to keep&nbsp; your computer and e-mail&nbsp; account safe,
please,&nbsp; follow the instructions.

For details see the&nbsp; attached file.

Attached file&nbsp; protected with the password&nbsp; for&nbsp; security&nbsp; reasons. Password is 35326.

Have&nbsp; a good&nbsp; day,
&nbsp; &nbsp; The xxx.net&nbsp; team&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;&nbsp; http://www.xxx.net
郵件檔頭如下
程式碼:
Return-path: <xxx.xxx@xxx.net>
Envelope-to: xx@xxx.net
Delivery-date: Thu, 04 Mar 2004 03:09:36 -0600
Received: from [140.112.250.xxx] (helo=kaola)
 by cp7.secserverpros.com
 with smtp (Exim 4.24) id 1AyorI-0003vm-8T for xxx@xxx.net;
 Thu, 04 Mar 2004 03:09:36 -0600
Date: Thu, 04 Mar 2004 17:09:20 +0800
To: xxx@xxx.net
Subject: Notify about your e-mail account utilization.
From: noreply@xxx.net
Message-ID: <rumwrphrskbafbauwoo@xxx.net>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="--------hfdsykypheyufdoyyoav"

由於用BECKY,所以郵件並未下載,只是感覺這2封郵件很怪,所以用另存新檔的方式準備儲存時被NAV檢測出有病毒。
« 最後編輯時間: 三月 11, 2004, 01:40:34 am 由 acsite » 已記錄
acsite
管理員
Hero Member
*****
離線 離線

文章: 4,027


個人網站
« 回覆文章 #1 於: 三月 11, 2004, 01:29:42 am »

程式碼:
Return-path: <12.3993.1376349@edmdb.yam.com>
Envelope-to: 5d820582d4868cb4150dcc2cfa107640@xxx.net
Delivery-date: Thu, 04 Mar 2004 03:10:44 -0600
Received: [color=red]from [140.112.250.xxx] [/color](helo=kaola)
 by cp7.secserverpros.com
 with smtp (Exim 4.24) id 1AyosN-0003xf-Ie for 5d820582d4868cb4150dcc2cfa107640@xxx.net;

程式碼:
Envelope-to: xxx@xxx.net
Delivery-date: Thu, 04 Mar 2004 03:09:36 -0600
Received: [color=red]from [140.112.250.xxx] (helo=kaola)[/color]
 by cp7.secserverpros.com
with smtp (Exim 4.24) id 1AyorI-0003vm-8T for xxx@xxx.net;


是從140.112.250.xxx寄出到CP7上面您的帳號
所以不是CP7發出的
« 最後編輯時間: 三月 11, 2004, 01:39:53 am 由 acsite » 已記錄
頁: [1]
  列印  
 
前往:  



 
 
bottom
Copyright © 2002 - 2017 ACSite.NET All Rights Reserved.