I have recently (past week) started getting about 20 versions of a notification of undeliverd email. SOme have attachments which are clearly spam contents (I of course do not open them). I set Outlook to view email as text only. The email body of these has somewhat crude looking message - a typical spam msg, possibly virus in attachment. But a new kind has no attachment, but has some sort of bogus but coherent msg in body, followed by a large block of encrypted code, and then something about a .gif file. An example follows, minus the encryption, which may be dangerous:
**************************
*******
Hi. This is the qmail-send program at mpls-mailin-08.inet.qwest.
net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<fisk@mail-slkc.uswest.net
>:
Disk Quota Exceeded.
Sorry, your message cannot be delivered because the recipient has
exceeded their disk space limit for email.
--- Below this line is a copy of the message.
Return-Path: <espz@turnertoys.com>
Received: (qmail 15879 invoked by uid 0); 4 Oct 2006 01:36:55 -0000
Received: from unknown (HELO mpls-cmx-01.inet.qwest.net
) (63.226.138.1)
by mpls-mailin-01.inet.qwest.
net with SMTP; 4 Oct 2006 01:36:55 -0000
Received: (qmail 51783 invoked by uid 0); 4 Oct 2006 01:36:50 -0000
Received: from unknown (HELO ufbovnx) (211.224.75.31)
by mpls-cmx-01.inet.qwest.net
with SMTP; 4 Oct 2006 01:36:47 -0000
Received: from 211.224.46.87 ([211.224.46.87])
by ufbovnx (8.13.2/8.13.2) with SMTP id k941bDJq011061;
Wed, 4 Oct 2006 10:37:13 +0900
Date: Wed, 4 Oct 2006 10:35:38 +0900
Message-ID: <45230FEA.3070809@turnerto
ys.com>
From: "Rosalia Kemp" <espz@turnertoys.com>
To: fisk@uswest.net
User-Agent: Thunderbird 1.5.0.7 (Windows/20060909)
MIME-Version: 1.0
Subject: right-hand
Content-Type: multipart/related;
boundary="------------0407
0902010108
0000050702
"
X-DCC-Qwest.net-Metrics: mpls-cmx-01.inet.qwest.net
1210; Body=1 Fuz1=1 Fuz2=1
This is a multi-part message in MIME format.
--------------040709020101
0800000507
02
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding:
7bit
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset
=ISO-8859-
1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<img alt="" src="cid:part1.01070803.08
010508@tur
nertoys.co
m"
height="338" width="814"><br>
Read on and find out.<br>
The positions of the models and the underwater lighting are sometimes
quite beautiful - definitely worth a visit if you're even slightly
attracted to the concept. This new series with Kristin starts out with
the old standard backdrop, both in color and in black and white, and
I'll shortly be posting a few other lighting situations using this same
model. The positions of the models and the underwater lighting are
sometimes quite beautiful - definitely worth a visit if you're even
slightly attracted to the concept. In these new shots, taken at the very
start of the session, I think you'll notice a certain reticence and
innocence on her part, which makes the discovery of the nipple rings a
bit of a surprise. But every once in a while, one of my commissions not
only produces some great shots, but the client also gives permission to
have a few images posted on ths site.<br>
I don't know about you, but for me this is a refreshing change from all
the cookie cutter Russian models we see way too much on the web. NET
using a toolkit that he helped the Microsoft Visual Basic team develop.
Note: I've started doing brand new scans of these images, and increased
the on screen size a bit. You can use Guidance Explorer to find out.<br>
Read on and find out.<br>
However, even now, I don't think I would outsource the exquisite task of
wrapping up that particular body. Also, it will evidently be broadcast
several times over the month of April - will try to get the exact air
dates shortly. If you're in the US, and if you're a Verizon subscriber
with the right kind of phone, you may be able to help - and if not you
can at least let me know your opinion.<br>
Marina worked in one of the clubs with several of my other models, but
I'd never taken much notice of her because her self-applied makeup was
rather severe. They're local, so I occasionally run into the models and
site operators. NET Framework SDK, and WinFX SDKs, into the new Windows
SDK. This session with Marina was one of the last assignments I did for
Penthouse in my other Emeryville studio. This article deals with how to
get concurrency into your code in the first place. I'll be posting a few
exclusive samples of the Prague sessions shortly.<br>
I also promote other sites and other photographers here - usually people
who do great erotic work somewhat similar to my own, or at least with
some artistic flair.<br>
Most of these have never been seen before, outside of Penthouse.<br>
The positions of the models and the underwater lighting are sometimes
quite beautiful - definitely worth a visit if you're even slightly
attracted to the concept.<br>
As a start on this venture, I've started doing a lot more experimenting
with natural light and non-canvas environments.<br>
She's also one of the few models who's smile seems to make the picture
stronger.<br>
I've been out of the studio for a few days, so I'm posting one of my
final classic Studio Nudes sessions from Portland again, plus a series
of shots from guest, Abby Winters.<br>
This new series with Kristin starts out with the old standard backdrop,
both in color and in black and white, and I'll shortly be posting a few
other lighting situations using this same model. Any image on the site
or in my books may be ordered during the sale. When I first met her she
looked like she'd just finished a softball game, and she had a cute
awkward way about her that sharply contrasts with some of the slick
Hollywood nudes I've learned to hate. The sessions with Kristin, Calico
and Tiana were done with the same studio lights, but then processed with
different adjustment settings. Most of these have never been seen
before, outside of Penthouse. Read on and find out.<br>
Most of these have never been seen before, outside of Penthouse.<br>
I say that without embarassment, since I was just a kid at the time.
Read on and find out.<br>
You can use Guidance Explorer to find out.<br>
<br>
</body>
</html>
--------------040709020101
0800000507
02
Content-Type: image/gif;
name="peninsula.gif"
Content-Transfer-Encoding:
base64
Content-ID: <part1.01070803.08010508@t
urnertoys.
com>
Content-Disposition: inline;
filename="peninsula.gif"
**************************
**********
**********
*
Now, I am receiving about 100/hour. They have changed slightly - an example:
******************
User mailbox exceeds allowed size: bhandaraceo@mahawssd.gov.i
n
Original message follows.
Received: from ivan [201.8.205.36] by my-ntserver.com with ESMTP
(SMTPD32-8.05) id A0197D5012C; Thu, 05 Oct 2006 05:51:45 +0530
Return-Path: <stocknews@turnertoys.com>
Received: from 216.71.95.201 (HELO mail.turnertoys.com)
by mahawssd.gov.in with esmtp (3YA8TQWK0O21 I2WY)
id ZE8X52-YP3RUB-T0
for bhandaraceo@mahawssd.gov.i
n; Thu, 5 Nov 2006 00:27:09 +0180
Date: Thu, 5 Nov 2006 00:27:09 +0180
From: "Ed Figueroa" <stocknews@turnertoys.com>
X-Mailer: The Bat! (v1.62r) Business
X-Priority: 3 (Normal)
Message-ID: <491417842.04557701983564@
thebat.net
>
To: bhandaraceo@mahawssd.gov.i
n
Subject: United Nations.
MIME-Version: 1.0
Content-Type: text/plain;
charset=Windows-1252
Content-Transfer-Encoding:
7bit
X-Spam: Not detected
X-IMAIL-SPAM-VALHELO: (131399980)
BIG NEWS ARE HITTING ON THURS DAY FOR CRSVF!!!
DON'T miss this INVESTMENT MOMENT, PLACE CRSVF ON THE RADAR!!!
Trade A lert: THURSDAY, October 05, 2006
Symbol : CRSVF.OB
Current Pri ce : $0.18
Pr evClose : $0.19
Recomm endation: ST RONG B UY
WATCH THIS sto ck GO HIGHER AND HI GHER
DON'T MI SS THIS INVE S TMENT MOMENT, PLACE CRSVF ON THE PORTFO LIO !!!
About Capital Reserve Canada:
CRC is an gas & oil services company based in Edmonton, Alberta.
Through its wholly owned subsidiary, KCP Innovative Services, Inc., CRC offers technologically tools for use in several areas of the industry.
The first aids in testing and development of newly found resources; another measure existing wells' productivity; and the third hastens well abandonment, ensuring compliance with regulatory emission guidelines.
The fourth, through its proprietary software and hardware technologies, is used to determine the profitability of coal bed methane deposits, which may be developed and sold as natural gas.
CRC has a second wholly owned subsidiary, Two Hills Environmental, to assist with problem waste from oil and gas companies, and provide underground storage.
ADD THIS G EM TO YOUR R AD AR AND WATCH IT TRADE ON THURSDAY, October 05, 2006 !!!!!!
[message truncated]
**************************
******
These appear to be returned after having originally been sent by "stocknews@turnertoys.com"
(turnertoys is my domain).
I have Zonealarm and a Lynksys hardware firewall and Spybot. Zonealarm also checks for spyware. I update my norton antivirus definitions daily. I am not on a local network - just a standalone. I use XP Pro SP2, Intel chip. IIS is enabled for my local web to test my work, but I use IIS Lockdown very restrictive settings, and Zonealarm is set so IIS and MS Frontpage can communicate only w trusted zone, and MS office apps cannot communicate w either zone nor can they send mail, same w Adobe Acrobat Reader. I do not have Macromedia Flash plugins for browsers because I think it may want to communicate back & forth. I ran a system scan 2 nites ago when this was just starting - appears to be clean.
Could my computer somehow be acting as slave after being compromised by trjan, worm, virus etc? Or am I for some reason getting a flood of spam which is spoofing my address as if I had sent an email to someone? I will point out that returned email usually happens quickly after sending to a bad address, but I got a flood of 95 of these things after the computer had been offline for 3 hours.
Any Ideas??
Start Free Trial
