F.a.o Dave O'neil **** ASAP****

[Dr Cranic]

i got one aswell but didnt open it.

[negri]

i dont think by opening the email anyone who recieved it has been hacked -

there wasnt any files to download.

it seems to be that daves inbox has been hacked .

ive scanned my system with spy sweeper and avast and i have no bad files

[Trickster]

Yeah i got it at 3 this morning on my bosses work computer so hopefully its killed it

[mrwatt]

got it too

[Frosticles]

got it as well but deleted.

[rslaurie]

Got one too, Just thought Dave had been on the juice last night

[RS2000EXPRESS]

I've got it too!

RS2000EXPRESS
RS Mk2 Club 099

[robsrs2000]

me 2

[RS2000CUSTOM]

Giz is on the case

It appears that the culprit MAY be VBgarage !

No dodgy e-mails were sent before the VBgarage was added

Whilst the e-mails are a pain in the RSe they do not appear to be malicious

Simply delete any e-mails that you think are dodgy

Myself or Giz will update when more info is available

[Gizmo]

Lets look at the mail !!

X-Apparently-To: ############ via 217.146.188.135; Mon, 12 Feb 2007 00:33:30 +0000
X-Originating-IP: [62.73.174.96]
Authentication-Results: mta837.mail.ukl.yahoo.com from=rs2000custom.co.uk; domainkeys=neutral (no sig)

Received: from 62.73.174.96 (EHLO eul0000773.eu.verio.net) (62.73.174.96)
by mta837.mail.ukl.yahoo.com with SMTP; Mon, 12 Feb 2007 00:33:29 +0000

Received: from mailout02.dsvr.x-isp.net (mailout02.dsvr.x-isp.net [213.253.179.6])
by eul0000773.eu.verio.net (8.13.4/8.13.4/Debian-3) with ESMTP id l1C0XRw8024953;
Mon, 12 Feb 2007 00:33:27 GMT

Received: from scoutbase.dsvr.co.uk ([212.69.195.113])
by mailout02.dsvr.x-isp.net with esmtp id 1HGP8C-0001dh-2N; Mon, 12 Feb 2007 00:33:20 +0000

Below Where the mail came from !!!!
Received: from web by scoutbase.dsvr.co.uk with local (Exim 4.62)
(envelope-from <web@scoutbase.dsvr.co.uk>)
id 1HGP16-0004cu-KQ; Mon, 12 Feb 2007 00:26:00 +0000

To: dave@rs2000custom.co.uk
Subject: LOL I hacked joo
Reply-to: dave@rs2000custom.co.uk
From: dave@rs2000custom.co.uk
Message-ID: <bc25ec03b84b1364bbea9eaa7d82f12d@bbs.fzr1000exup.o rg.uk>
MIME-Version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 8bit
Date: Mon, 12 Feb 2007 00:26:00 +0000

Then the info inside the mail you dont see
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: PHP

Now the VERY INTERESTING !!!!
X-MimeOLE: Produced By phpBB2
X-AntiAbuse: Board servername - bbs.fzr1000exup.org.uk
X-AntiAbuse: User_id - 2
X-AntiAbuse: Username - RS2000CUSTOM
X-AntiAbuse: User IP - 62.252.64.13

And the Moral of the Story is

DAVE DELETE YOUR OLD BOARD U LAZY GIT !!!!

bbs.fzr1000exup.org.uk anyone remeber it ??

Chris

[Dave1800BDA]

well done giz, this one didnt beat you then

[dasadrew]

Yeah,
I kind of thought it was going to be the good 'ol
62.73.174.96 (EHLO eul0000773.eu.verio.net) (62.73.174.96)
by mta837.mail.ukl.yahoo.com with SMTP; Mon, 12 Feb 2007 00:33:29 +0000

WTF language do you use to chat up birds?

[Gizmo]

Drew

Money

Me

[RS2000CUSTOM]

DAVE DELETE YOUR OLD BOARD U LAZY GIT !!!!

Deleted

I thought it was gonna be something like that but didnt want to say anything

[pockets]

glad its sorted, i opened then read it then thought sh!T is my computer going to go nuts now!