【求助】今天收到一封怪信...請幫我看看.謝謝



贊助商連結


BL1978
2002-11-07, 08:54 PM
今天收到一封怪信...我被駭了嗎?
電腦中只有安裝 PCC 2002 防火牆而已.
請幫我看一下...謝謝

還是只是普通的廣告信...(但不像廣告)

信件內容

Hello,

Product Name: Microsoft Windows 2000
Product Id: 50293-270-4375835-09477

Process List:
NtLmSsp NT LM Security Support Provider
PCCPFW PC-cillin PersonalFirewall
ProtectedStorage Protected Storage
SamSs Security Accounts Manager
SysmonLog Performance Logs and Alerts
NtLmSsp NT LM Security Support Provider
PCCPFW PC-cillin PersonalFirewall
ProtectedStorage Protected Storage
SamSs Security Accounts Manager
SysmonLog Performance Logs and Alerts

Thank you.

internet標題

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: (qmail 31629 invoked from network); 7 Nov 2002 10:27:02 -0000
Return-Path: <[email protected]>
Message-ID: <[email protected]>
X-Filter: server-rule2
Received: from unknown (HELO edirect168.com) ([163.25.118.32]) (envelope-sender <[email protected]>)
by edirect168.com (qmail-ldap-1.03) with SMTP
for <[email protected]>; 7 Nov 2002 10:27:00 -0000
FROM: Joe <[email protected]>
DATE: Thu, 7 Nov 2002 18:28:37+0000
X-Mailer: EBT Reporter v 2.x
TO: [email protected]
subject: CGID
Mime-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="====_ABC1234567890DEF_===="
X-Priority: 3
X-MSMail-Priority: Normal
X-Unsent: 1

贊助商連結


shauronglu
2002-11-08, 09:24 AM
病毒信件
http://forum.icst.org.tw/phpBB2/viewtopic.php?t=271

BL1978
2002-11-08, 08:16 PM
謝謝您的回覆...

阿立
2002-11-11, 11:29 AM
我也有收到同樣的信,我isp擋下來了...
但有一個很奇怪的地方,就是在 Return-Path 的地方是我自己 email address.
我想問的是 Return-Path 這個地方能改的嗎?
還是我電腦之前就已經中毒了,而我通訊錄埵釵菑v的email adrees, 所以它能寄給我自己?

shauronglu
2002-11-12, 09:03 AM
可以, 該病毒有自己的 SMTP engine, 發信者可以自己設定 (病毒設定成使用者自己)

阿立
2002-11-12, 04:09 PM
嗯...謝謝解答。
這病毒已經把我弄得好幾日沒覺好睡了,一直擔心是否中了毒...
看來雖然我電腦有時候愛耍小脾氣,但還是冰清玉潔,沒遭到病毒的毒手 :D