TIP: Click on subject to list as thread! ANSI
echo: osdebate
to: Gary Britt
from: John Beamish
date: 2006-11-17 18:31:02
subject: Re: NLS.NET Is Spamming Me With A Trojan/Worm????

From: "John Beamish" 

I have been getting a gazillion spams recently.  Today, I've had more than
200 (all identified by Rogers/Yahoo) with a significant percentage having a
piece of malware.  I just deleted them.

I just checked back.

All of the malware ones are from georger{at}nls.net



On Fri, 17 Nov 2006 15:11:32 -0500, Gary Britt
 wrote:

> ;), I didn't think that was one of *his* sheep!!!
>
> I've gotten 6 more since the last update.  I'm setting up a virus filter
> at my mail server to block nls.net messages for the time being.
>
> Avast is definitely showing it was worth the price I paid for it today!
>
> Maybe some spammer is spoofing the nls.net part of the address?
>
> Funny though that these all come from georger{at}nls.net.  Amazing what the
> bot computers can pickup and figure out.
>
> Gary
>
> Rich Gauszka wrote:
>> I'm not getting anything. You didn't mess with any of Geo's sheep did
>> you? 
>>   "Gary Britt"  wrote in message
>> news:455e0c42$1{at}w3.nls.net...
>>> I've gotten 6 more since 1:00 PM ET.  I hope some bot/worm isn't
>>> spamming all of nls.net with this worm.
>>>
>>> Thanks,
>>>
>>> Gary
>>>
>>> Gary Britt wrote:
>>>> Hey George,
>>>>
>>>> Are you testing my thunderbird email program for exploits??
>>>>
>>>> This morning I received 21 email messages all from Georger{at}nls.net
>>>> and all infected with various photos containing the Win32:VB-CD2
>>>> [Wrm].
>>>>
>>>> Avast zapped them all as they came in, but I had to sit there and
>>>> click delete twice for each one of them so Avast could clean the
>>>> infected photos from the emails.
>>>>
>>>> Here is a sample of what Avast was reporting:
>>>>
>>>> Incoming email 'Fw: Funny :)' From: "georger"
, To:
>>>> \Video_part.mim#1999582787
>>>>
>>>> Incoming email 'Re: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>
>>>> Incoming email 'Re: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Attachments[001].B64#483803162
>>>>
>>>> Incoming email 'Fw: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Video_part.mim#1999582787
>>>>
>>>> Incoming email 'Fwd: image.jpg' From: "georger"
,
>>>> To: \Attachments001.BHX#3477615820
>>>>
>>>> Incoming email 'Fw: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Attachments00.HQX#1805444652
>>>>
>>>> Incoming email 'Fw: Sexy' From: "georger"
, To: >>> b AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>
>>>> Incoming email 'Re: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Attachments00.HQX#1805444652
>>>>
>>>> Incoming email 'Fw: SeX.mpg' From: "georger"
, To:
>>>> \SeX.mim#3194668624
>>>>
>>>> Incoming email 'Fw: ' From: "georger"
, To: >>> AT g e n c o g . c o m>\Attachments001.BHX#3477615820
>>>>
>>>> Incoming email 'Fwd: Crazy illegal Sex!' From: "georger"
>>>> , To: >>> m>\Sex.mim#2779844178
>>>>
>>>> Gary
>>

--- BBBS/NT v4.01 Flag-5
* Origin: Barktopia BBS Site http://HarborWebs.com:8081 (1:379/45)
SEEN-BY: 633/267 270
@PATH: 379/45 1 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.