Bizarre SPAM [Archive]

View Full Version : Bizarre SPAM

k4kyv

11-10-2005, 08:05 PM

I have lately been getting some bizarre junk e-mail. It comes from senders I have never heard of, and instead of the usual attempts to scam or sell some worthless junk, it is either gibberish or something that appears randomly cut out of context that makes absolutely no sense.

I can't figure out what the purpose of it is. Here are a few examples:

From: "Kristin Rock" <UFournierr@falconrule.com>
Subj: Re: For drink in confederacy breach

prayer Early in the morning, I sauntered through the dear old tranquil

This is what I got when I clicked on "properties" to extract the internet headers for he above message:

Return-Path: <ULayz@afterhoursit.com>
Received: from mxsf26.cluster1.charter.net ([10.20.201.226])
by mtao02.charter.net
(InterMail vM.6.01.05.03 201-2131-123-103-20050825) with ESMTP
id <20051106190423.MPEU15549.mtao02.charter.net@mxsf2 6.cluster1.charter.net>;
Sun, 6 Nov 2005 14:04:23 -0500
Received: from mxip28a.cluster1.charter.net (mxip28a.cluster1.charter.net [209.225.28.187])
by mxsf26.cluster1.charter.net (8.12.11/8.12.11) with ESMTP id jA6J3xkQ028031;
Sun, 6 Nov 2005 14:04:22 -0500
Received: from unknown.dct.al.charter.com ([68.191.137.181])
by mxip28a.cluster1.charter.net with SMTP; 06 Nov 2005 14:04:05 -0500
X-IronPort-AV: i="3.97,298,1125892800";
d="gif'147?scan'147,208,217,147"; a="431688601:sNHT47012198"
Received: from ZTPUHD (cdtt.falconrule.com[172.28.239.233])
by iaxfiyj.falconrule.com (Postfix) with SMTP id 2E2I9A7705
for <ruthmass@charter.net>; Sun, 06 Nov 2005 11:03:19 -0800
(envelope-from YPTIBJ@falconrule.com)
From: "Kristin Rock" <UFournierr@falconrule.com>
To: "Ruthmass" <ruthmass@charter.net>
Subject: Re: For drink in confederacy breach
Date: Sun, 06 Nov 2005 11:03:19 -0800
Message-ID: <3936844416.691@falconrule.com>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="--KLS59zoIHEsBxQuIQH"

Here's another one:

From: "Katelyn Pope" <Plnfvam@cavtel.net>
To: "Browneyes.0725" <browneyes.0725@charter.net>
Subject: Re: But watch in geology
Date: Sat, 05 Nov 2005 15:51:45 -0800
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="--9OCztndAZrbrIe9ZvJG0kJ"

saviour if he were waking, but with the same determined face.

Then there are some like this one that are TOTAL gibberish:

From: "Natasha" <aqgukrruqyz@fast.net>
To: (my e-mail address)
Subject: Angelina Jolie has a few

handmade wtch like rolx
u cant ask for better immitations

038.veryncetogtone.com

seuquqsokj woyxm lpoyiyle irs rv afgmecsimbegvok
ekovn tblcmrry iek tmkgkgsvs uxzqpnikiahi zybtilr
ihuchqd vao bxnvzpgro ajelmqauca osov qbpvnve

Does anyone else get this stuff, and does anyone know what the purpose of it is?

Some of the messages have attachments, but I am not stupid enough to open any of them.

WD8OQX

11-10-2005, 08:21 PM

Been getting what appears to be bounce back of undeliverable email to people I don't know - I think mine is an attempt of a troller to go "phishing" (gather info) - in your case it could be a number of things - best advice, when in doubt throw it out - (delete it). http://www.qrz.com/iB_html/non-cgi/emoticons/mad.gif http://www.qrz.com/iB_html/non-cgi/emoticons/cool.gif

ADDED NOTE: If this is an on going thing, you may want to consider changing your address as some "nut" may now have it.

KD6NIG

11-10-2005, 08:31 PM

The reason why you get this is some spam blockers look for certian words, and how many times they appear. If the words appear x number of times in a x number of word message, it will kick it out.

By adding random gibberish, it makes it appear to be a legit email with just a 'banned' word in it, and its allowed through.

As for the 'returned mail' they are either virus attachments, or spam in them, but again, put there to fool you into thinking you sent it, so you'll look at it and get infested, or get the spam.

Good virus detection will block the attachment and prevent any harvesting of info off your machine.

And if you're getting only a few, congrats. Ever since yahoo merged its mail system into SBC internet, I get 60-90 messages a day, of which maybe 3 aren't spam. The rest are crud, and a few of these return emails too.

WA3KYY

11-10-2005, 08:52 PM

You aren't seeing the pop-ups which is what the real message is. You mail software or some other security software you or your ISP is running is stopping the pop-up ads. Be thankful.

WD8OQX

11-10-2005, 11:05 PM

Quote[/b] (KD6NIG @ Nov. 09 2005,14:31)]As for the 'returned mail' they are either virus attachments, or spam in them, but again, put there to fool you into thinking you sent it, so you'll look at it and get infested, or get the spam.

Good virus detection will block the attachment and prevent any harvesting of info off your machine.
I agree with this part that they are intended to get you in some manner & I've only gotten 2 thus far - but the only time I get any viruses is when I "get stupid" & download something off a "known hackers" web site. But I scan that before running it. Just cost me the download time. (still a bummer.) (sometimes I get very useful tools, though)

wa4brl

11-11-2005, 01:53 AM

I recently started getting email bouncebacks for messages I wasn't sending (but my computer WAS). I discovered it was the virus:
W32.Netsky.P@mm

Symantec offers detailed info about it and a free removal tool at this address:

http://securityresponse.symantec.com/avcente....ol.html (http://securityresponse.symantec.com/avcenter/venc/data/w32.netsky@mm.removal.tool.html)

W2ILP

11-11-2005, 04:09 AM

I get e-mail that is similar to the examples that started this thread. I also get lots of stuff in Chinese characters, although I can't read Chinese. I think the examples shown can either be kids playing, Chinese or other foreigners who are trying to write in English, or a secret code of some type that tries to sell illegal stuff to those who know how to decipher the code. At any rate I delete it and forget it. I never try to reply to it and above all if it has attachments I never open them.

w2ilp (Ignoring Lotsa Problems)

W2ILP

11-11-2005, 04:18 AM

Another theory of mine is that some of these e-mails are actually sent by Norton or Mcaffee to test the effectiveness of their competition....or to give reason for us to buy better insecurity programs.

w2ilp (Insecurity Lockout Programs?)

kd7msc

11-11-2005, 04:25 AM

I like Ham, but I hate Spam. I was thinking of using a Spam can as a project box for a keyer, or sound card interface. http://www.qrz.com/iB_html/non-cgi/emoticons/biggrin.gif

w3sy

11-11-2005, 05:10 PM

Sounds like you are getting fortune cookies by e-mail...?

k6pme

11-11-2005, 05:15 PM

Quote[/b] (W2ILP @ Nov. 10 2005,21:18)]Another theory of mine is that some of these e-mails are actually sent by Norton or Mcaffee to test the effectiveness of their competition....or to give reason for us to buy better insecurity programs.

w2ilp (Insecurity Lockout Programs?)
I have often wondered that myself since some of them seem to be completely senseless. Either that or the younger crowd just trying to see if it can be done. Who knows.

w3sy

11-11-2005, 05:17 PM

Well, today grape river apple bacon. Starched willow campaign risk.

k6pme

11-11-2005, 05:21 PM

Quote[/b] (w3sy @ Nov. 11 2005,10:17)]Well, today grape river apple bacon. Starched willow campaign risk.
Apple flavored bacon from the Grape River Bacon Company?

http://www.qrz.com/iB_html/non-cgi/emoticons/tounge.gif

K8ERV

11-11-2005, 07:32 PM

Quote[/b] (W2ILP @ Nov. 10 2005,21:18)]w2ilp (Insecurity Lockout Programs?)
ILP, you just gotta stop doing this. I am getting very dirty on the floor rolling---

TOM K8ERV Montrose Colo

k4kro

11-12-2005, 01:59 AM

These are attempts to deliver browser hijackers and/or viruses.