Its me ("Your message dated

[J Forster]

That's a coincidence. Today I received an email with no body but just an

attachment from a person that I never heard of before. The strange thing
is
it used my XXXXX.ARRL.NET address. It makes you wonder if someone is
perusing the Ham lists for addresses. I rarely use my ARRL address.

Tom K3TVC





There is almost CERTAINLY someone on this list who lives in Spain and
uses Telefonica.es as an ISP who is infected with a virus or worm.  I
have been getting virus laden messages, usually two per week and close
together for almost a year. They are about 42K to 44K with an
attachment. Here are the 'senders'

ea5jk at telefonica.net
jorge-stoll at speedy.com.ar
sales at rocketradio.net
hr2rch at gmail.com
electro at arnet.com.ar
w8mmn at arrl.net
boatanchors at listserv.tempe.gov

NOTE: The infected computer has likely RECEIVED emails from the above
addresses.

The subject lines contain:

Mail Delivery (failure jfor at quik.com)

Re: hi
Re: List
Re: document

Telefonica is an absolute scumball ISP and refuses to do ANYTHING about
the virus infection.


Here are more dates and 'senders' traced to the originating ISP in 2006:




domuscentral at domuscentral.com

w8ek at copper.net

83.41.228.46 : nemesys at telefonica.es      emtron at emtron.com.au
7/8/06           HF Linear Amps
83.41.228.46 : nemesys at telefonica.es      ka5crl at texwire.com
7/8/06           Texoma Wireless

83.49.113.211
mariodiazmorales at yahoo.es   7/15/06
83.49.113.211
comunicatec at telesurf.com.py  7/15/06   Paraguay ISP


83.42.238.177 : nemesys at telefonica.es    anfuga1 at hotmail.com
7/22/06
83.42.238.177 : nemesys at telefonica.es    juan_auxi at hotmail.com
7/22/06

83.44.158.83 : nemesys at telefonica.es
sales at semirim.com                8/3

83.41.228.39 : nemesys at telefonica.es
collain at telefonica.net              8/5
83.41.228.39 : nemesys at telefonica.es
monti at telecable.es                 8/5

83.44.159.97 : nemesys at telefonica.es       info at lacorradadelastres.com
8/9

83.54.100.22 : nemesys at telefonica.es    dl4ner at qsl.net.modification.net
8/27

83.35.235.37 : nemesys at telefonica.es
info at ruralmarket.com        9/14
83.35.235.37 : nemesys at telefonica.es
dl9qj at amsat.org                 9/14

83.32.8.168 :   nemesys at telefonica.es
kimdoli at hotmail.com          9/15


It would be great to shut this garbage off.
-John

-----------------------------------------------------------
This list is a public service of the City of Tempe, Arizona
-----------------------------------------------------------

Subscription control - http://www.tempe.gov/lists/control.asp?list=BOATANCHORS
To post - BOATANCHORS at LISTSERV.TEMPE.GOV
Archives - http://listserv.tempe.gov/archives/BOATANCHORS.html