What /is/ this supposed to be?

**anhedonia** · May 30th, 2002, 06:25

From :
comments <comments@foxnews.com>

To :
fifi_spunkbubble@hotmail.com

Subject :
CELLPADDING

Who are they, where did they get my email address from and why the hell do they keep sending me completely blank e-mails?

Anyone else getting this crap?

**Coight** · May 30th, 2002, 08:09

Check the message headers to see where it came from

**xsnetwork** · May 30th, 2002, 08:16

I keep getting completely blank email sent to me too.... I only seem to get them on my hotmail account though

**meow** · May 30th, 2002, 10:23

Sure there isn't a little embedded virus in them?

**Cyber** · May 30th, 2002, 10:50

From what I know, there is.

I keep getting ~128kb emails with no body to it.

**98125** · May 30th, 2002, 11:17

it is a virus. I thought earlier today
Right i've had enough of these and sent one of them off to my personal freeserve e-mail address. Norton picked it us as being infected with W32.klez.h@mm

view the headers and near the top you should find something like this
****************************************************
From b-ballman@attbi.com Wed, 29 May 2002 14:45:11 -0700
Received: from [204.127.202.62] by hotmail.com (3.2) with ESMTP id
MHotMailBEBE96AD004F4004378CCC7FCA3E8ED40; Wed, 29 May 2002 14:44:14 -0700
Received: from Cqoxhkpbs ([24.61.85.157]) by sccrmhc02.attbi.com
(InterMail vM.4.01.03.27 201-229-121-127-20010626) with SMTP
id <20020529214408.UUCN11183.sccrmhc02.attbi.com@Cqoxhkpbs>
for <mullin16@hotmail.com>; Wed, 29 May 2002 21:44:08 +0000
Wrom: LMHAALPTCXLYRWTQTIPWIGYOKSTTZRCLBDXRQ
To: mullin16@hotmail.com
Subject: W32.Klez.E removal tools
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=OkN93M0iF9Lj3
Message-Id: <20020529214408.UUCN11183.sccrmhc02.attbi.com@Cqoxhkpbs>
Date: Wed, 29 May 2002 21:44:13 +0000

--OkN93M0iF9Lj3
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

W32.Klez.E is a very dangerous virus that spread through email.
Sophos give you the very W32.Klez.E removal tools

For more information,please visit http://www.Sophos.com

--OkN93M0iF9Lj3
Content-Type: application/octet-stream;
name=install.exe
Content-Transfer-Encoding: base64
Content-ID: <Bq631J3Rn8975iT8yY>

****************************************************

install.exe is the virus as i've had it twice today

Mullin

**Sain Cai** · May 30th, 2002, 12:36

It may not neccessarily be a virus. I have been told that Microsoft has some hold over hotmain, and sells your email address to spam companies.

I have had numerous companies send me crap in my hotmail account, so I just use my domain account instead.

**98125** · May 30th, 2002, 15:44

if it is spam it would not be a massive e-mail (most of the time) just read the headers and if it says anything next to name* and you don't know who it's from delete it

*name=install.exe

Mullin

**Webdude** · May 30th, 2002, 16:16

Install Nortons. Every email I have every gotten that subject was "cellpadding" it was a virus. If you dont have Norton's....the virus just got you..I hope you have no banking info on your computer..

**Jan** · May 30th, 2002, 16:36

Those that get these *blank* messages at hotmail, go to options - Mail display settings - message headers, choose advanced click ok. Then go back to your *blank* email and you will see a link View E-Mail Message Source click this and you will see a mile of code, which is the .exe file. As in my example (I won't paste all the code because it is toooooooooo long)

--DZ78mO4nHuJVJVF1443KI857d99
Content-Type: application/octet-stream;
name=setup.exe
Content-Transfer-Encoding: base64
Content-ID: <OXAAJ944yTK7m48790>

TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
AAAAAAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBi ZSBydW4gaW4g
RE9TIG1vZGUuDQ0KJAAAAAAAAAAYmX3gXPgTs1z4E7Nc+BOzJ+Qfs1j4E7Pf 5B2zT/gTs7Tn
GbNm+BOzPucAs1X4E7Nc+BKzJfgTs7TnGLNO+BOz5P4Vs134E7NSaWNoXPgT swAAAAAAAAAA
UEUAAEwBBAC4jrc8AAAAAAAAAADgAA8BCwEGAADAAAAAkAgAAAAAAFiEAAAA EAAAANAAAAAA
QAAAEAAAABAAAAQAAAAAAAAABAAAAAAAAAAAYAkAABAAAAAAAAACAAAAAAAQ AAAQAAAAABAA

I guess in one way Hotmail protects us because we can't accidentally on click this nasty

**Akalon** · May 30th, 2002, 17:11

Originally posted by Cyber
From what I know, there is.

I keep getting ~128kb emails with no body to it.

I get those too

'cept I don't get them at hotmail...

**anhedonia** · May 30th, 2002, 20:47

What, you mean I got a virus? But I didn't install anything and nothing at all happened. Plus Hotmail has that thing with McAfee's which doesn't let (most) viruses get sent, doesn't it? And it doesn't let you download them.

What is this virus meant to do? And how do I see if I've got it, and if I do, how can I get rid of it? Eek, what damage will it have done!!! But I think I'm OK because nothing at all happened.

**anhedonia** · May 30th, 2002, 20:49

Originally posted by Jan
Those that get these *blank* messages at hotmail, go to options - Mail display settings - message headers, choose advanced click ok. Then go back to your *blank* email and you will see a link View E-Mail Message Source click this and you will see a mile of code, which is the .exe file. As in my example (I won't paste all the code because it is toooooooooo long)

I guess in one way Hotmail protects us because we can't accidentally on click this nasty

Oh, cool Jan, so that means I didn't actually get the virus? Yaya, thanks for the info, btw.

**98125** · May 31st, 2002, 10:05

Plus Hotmail has that thing with McAfee's which doesn't let (most) viruses get sent, doesn't it? And it doesn't let you download them.

Mayby if it worked (it never does for me)

What is this virus meant to do? And how do I see if I've got it, and if I do, how can I get rid of it? Eek, what damage will it have done!!! But I think I'm OK because nothing at all happened.

http://www.symantec.com/avcenter/ven...klez.h@mm.html

Try running the fix, it'll help

Mullin