Wilsons Sandbox

More accurately, I didn't write..... bigfatgreenbike@... wrote:

>Your bill. > > >

I didn't send this. The only computers that had this email account set up have been shut off the last two days while I was away. Has anything like this happened to anyone else? Devon

Your email address was most likely spoofed. Most of the email viruses floating around spoof the sender's address (i.e., the virus mails aren't really from the person they seem to be from). -Lujo bigfatgreenbike wrote:

> More accurately, I didn't write..... > > bigfatgreenbike@... wrote: > > >>Your bill. >> >> >> > > I didn't send this. The only computers that had this email account set > up have been shut off the last two days while I was away. > > Has anything like this happened to anyone else? > > > Devon

[Non-text portions of this message have been removed]

On Wed, 2004-06-30 at 22:04, bigfatgreenbike wrote:

> More accurately, I didn't write..... > > bigfatgreenbike@... wrote: > > >Your bill. > > > > > > > I didn't send this. The only computers that had this email account set > up have been shut off the last two days while I was away. > > Has anything like this happened to anyone else?

Unless you were in Atlanta using Cox cable, it obviously wasn't you, do you know anybody there? [zmully@shzaq zmully]$ host 68.226.197.24 24.197.226.68.in-addr.arpa domain name pointer cdm-68-226-197-24.abbv.cox-internet.com. [zmully@shzaq zmully]$ whois 68.226.197.24 [Querying whois.arin.net] [whois.arin.net] Cox Communications Inc. NETBLK-COX-ATLANTA-7 (NET-68-224-0-0-1) 68.224.0.0 - 68.231.255.255 Cox Communications NETBLK-MA-RDC-68-226-192-0 (NET-68-226-192-0-1) 68.226.192.0 - 68.226.255.255 # ARIN WHOIS database, last updated 2004-06-30 19:10 # Enter ? for additional hints on searching ARIN's WHOIS database. [zmully@shzaq zmully]$ Z DC A5X A12X

zmully@... wrote:

>Unless you were in Atlanta using Cox cable, it obviously wasn't you, do >you know anybody there? > >

Actually, that klotz75 guy is up to his old idiot harassment again. I don't remember his address (deleted all his emails anyway) but he might have that ISP. How hard would it be for someone to route through Cox, and be sending from somewhere else?

>Cox Communications Inc. NETBLK-COX-ATLANTA-7 (NET-68-224-0-0-1) > 68.224.0.0 - 68.231.255.255 >Cox Communications NETBLK-MA-RDC-68-226-192-0 (NET-68-226-192-0-1) > 68.226.192.0 - 68.226.255.255 > ># ARIN WHOIS database, last updated 2004-06-30 19:10 ># Enter ? for additional hints on searching ARIN's WHOIS database. >[zmully@shzaq zmully]$ > >Z >DC >A5X >A12X > > > >

Guys, while this may have been sent by a real person, it follows the MO of email viruses: harvest email addresses from mailing lists, etc.; use them to send email with eye-catching subject line and virus attachment. There's nothing here to get bothered about. I get a dozen of such each day. Some even puport to be sent from *my* email address. -Lujo Devon wrote:

> > zmully@... wrote: > > >>Unless you were in Atlanta using Cox cable, it obviously wasn't you, do >>you know anybody there? >> >> > > Actually, that klotz75 guy is up to his old idiot harassment again. I > don't remember his address (deleted all his emails anyway) but he might > have that ISP. > > How hard would it be for someone to route through Cox, and be sending > from somewhere else? > > >>Cox Communications Inc. NETBLK-COX-ATLANTA-7 (NET-68-224-0-0-1) >> 68.224.0.0 - 68.231.255.255 >>Cox Communications NETBLK-MA-RDC-68-226-192-0 (NET-68-226-192-0-1) >> 68.226.192.0 - 68.226.255.255 >> >># ARIN WHOIS database, last updated 2004-06-30 19:10 >># Enter ? for additional hints on searching ARIN's WHOIS database. >>[zmully@shzaq zmully]$ >> >>Z >>DC >>A5X >>A12X >>

[Non-text portions of this message have been removed]

On Thu, 2004-07-01 at 10:51, Devon wrote:

> zmully@... wrote: > > >Unless you were in Atlanta using Cox cable, it obviously wasn't you, do > >you know anybody there? > > > > > Actually, that klotz75 guy is up to his old idiot harassment again. I > don't remember his address (deleted all his emails anyway) but he might > have that ISP. > > How hard would it be for someone to route through Cox, and be sending > from somewhere else?

It's probably just a virus that somebody who you've corresponded with on the list is infected with... Most virii troll through all the email on the computer to harvest addresses to send themselves to... And knowing how poorly the cable networks police their customers, it's entirely possible that this was sent through a zombie... Z DC A5X A12X

On Thu, 2004-07-01 at 11:25, Fred Hink wrote:

> I am on this "klotz75" guys hitlist. He is sending me the same messages > Devon is getting. His email is klotz75@... See if he is the same guy > from Atlanta. > > Fred

If you're getting the same thing, look in the headers of his emails, it should tell you what IP address he is sending from. Then I'd report him to Cox, see http://www.cox.com/policy/ "Prohibited Activities. You may not use the Service in a manner that violates any applicable local, state, federal or international law, order or regulation. Additionally, You may not use the Service to: * Conduct, participate in, or otherwise facilitate pyramid or other illegal soliciting schemes. * Take part in any fraudulent activities, including impersonating any person or entity or forging anyone else's digital or manual signature. .... How to Contact Cox. For any questions regarding this AUP, complaints of violations, or cancellation notices, please contact Cox at one of the following: E-mail: abuse@... Phone: See your invoice or visit http://www.cox.com/ and check under "Customer Service" U.S. Mail: See your invoice or visit http://www.cox.com/ and check under "Customer Service" " Z DC A5X A12X

I agree, I run textmode only mail on my home server for the most part and occasionally read my filtered spam mailbox just to see what the worms are up to these days. The "your bill." is a giveaway, it's part of the payload of a recent worm, I get many mails each day with that in the message body. The subject lines are changed randomly by the worms now. It was just a coincidence that the From: and To: worked out to be what they were is my suspicion.

> > It's probably just a virus that somebody who you've corresponded with > on > the list is infected with... Most virii troll through all the email on > the computer to harvest addresses to send themselves to... And knowing > how poorly the cable networks police their customers, it's entirely > possible that this was sent through a zombie... > > Z > DC

Sounds like the bushes in the swing arm . Had mine replaced at the start of the year. Get a friend to pull the bike onto the sidestand and wiggle the swingarm if there is any lateral movement where it bolts on then my guess is it's the bushes . ( Or maybe the bolt needs tightening ) -----Original Message----- From: Dooden [SMTP:dooden@...] Sent: Friday, July 02, 2004 3:06 AM To: DSN_klr650@yahoogroups.com Subject: [DSN_klr650] Rear Wheel Wiggle question Folks... Something I never noticed before, but it appears my rear wheel wiggles a little from side to side and can hear a metallic click when pushing/pulling the wheel when on the sidestand. Yet to take anything apart, just happen to notice it at work today walking by the bike, something told me to give the wheel a wiggle, yesterday I thought I detected a wobble rounding a corner, but figured I just hit a rock or something on the pavement. Looking for ideas before tearing it open. Dooden (dont dance) A15 Green Ape (dont want to dance either) List sponsored by Dual Sport News at www.dualsportnews.com. List FAQ courtesy of Chris Krok at: www.bigcee.com/klr650faq.html Unsubscribe by sending a blank message to: DSN_klr650-unsubscribe@yahoogroups.com . Yahoo! Groups Links DSN_klr650-unsubscribe@yahoogroups.com ________________________________________________________ THIS E-MAIL AND ANY ATTACHMENT(S) TRANSMITTED WITH IT MAY BE CONFIDENTIAL. YOU MAY NOT DISCLOSE, RE-TRANSMIT, COPY, DISTRIBUTE, OR ACT IN RELIANCE ON THE INFORMATION UNLESS YOU ARE SO AUTHORISED. YOKOHAMA TYRE AUSTRALIA PTY. LIMITED DOES NOT REPRESENT, WARRANT OR GUARANTEE THAT THE INTEGRITY OF THIS COMMUNICATION HAS BEEN MAINTAINED NOR THAT THE COMMUNICATION IS FREE OF VIRUSES OR ERRORS. IF YOU RECEIVED THIS E-MAIL IN ERROR, PLEASE IMMEDIATELY NOTIFY postmaster@.... ________________________________________________________ [Non-text portions of this message have been removed]