🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: az.internet
Article #236

SoBig virus Information

#236
From: (���) Guess Who
Date: Sat, 23 Aug 2003 14:19
62 lines
3859 bytes
SoBig virus Information 

FBI Issues subpoena to Easynews.com for SoBig virus Information

Phoenix, Arizona, August 22, 2003 - Easynews.com announced today that
it has responded to a subpoena issued by the FBI in regards to the
SoBig virus.

Easynews.com is a premium, high-quality UseNet access provider. UseNet
is a global network made of millions of people connected together
through UseNet servers, such as Easynews.com. Easynews.com has been
providing UseNet services since 1995. More information on the UseNet
network can be found at:
http://dir.yahoo.com/Computers_and_Internet/Internet/Chats_and_Forums/Usenet/

Easynews.com was contacted by phone by the Los Angeles FBI office on
Thursday afternoon, August 21st. The FBI informed Easynews.com that an
individual had used the Easynews.com UseNet server to upload the
SoBig.F virus on Monday, August 18th. The FBI was requesting any
information relating to the account used to upload the virus to the
UseNet network. Easynews.com with-held the account information until a
faxed subpoena from the FBI arrived on Friday, August 22nd, at 10:53am
MST (1:53pm EDT).

Easynews.com is releasing the UseNet headers from one of the binary
posts that contained the virus. The header appears below:

 
Path:
news.easynews.com!core-easynews!newsfeed1.easynews.com!easynews.com!easynews!easynews-local!news.easynews.com.POSTED!not-for-mail
From: Misiko <Misiko@dot.com>
Newsgroups: alt.binaries.amp, alt.binaries.boneless, alt.binaries.nl,
alt.binaries.pictures.chimera, alt.binaries.pictures.erotica,
alt.binaries.pictures.erotica.amateur.female 
Subject: Nice, who has more of it? DSC-00465.jpeg 
Message-ID: <MPG.19ab3e8e843bdff0989681@news.easynews.com> 
Organization: Misiko 
X-Newsreader: MicroPlanet Gravity v2.50 
Lines: 2815 
X-Complaints-To: abuse@easynews.com 
X-Complaints-Info: Please be sure to forward a copy of ALL headers
otherwise we will be unable to process your complaint properly. 
Date: Mon, 18 Aug 2003 19:46:19 GMT 
Xref: core-easynews alt.binaries.amp:2476089
alt.binaries.boneless:29017892 alt.binaries.nl:32597838
alt.binaries.pictures.chimera:2199579
alt.binaries.pictures.erotica:10555867
alt.binaries.pictures.erotica.amateur.female:3953364 
X-Received-Date: Mon, 18 Aug 2003 12:45:13 MST (news.easynews.com) 

"It appears the account was created with a stolen credit card for the
sole purpose of uploading the virus to the UseNet network.", reports
Michael Minor, CTO Easynews, Inc.

Easynews.com will not comment further on any other information as it
pertains to an active federal investigation.

Jeff Minor, CEO of Easynews, Inc., is available for brief comments at
360-378-6549.

Related News Stories:
http://news.google.com/news?hl=en&edition=us&q=easynews
Technical Details
Message-ID: <91uekvof397enb9p7uq0e1hbbiddeet58r@4ax.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-03!sn-xit-06!sn-xit-09!supernews.com!newsfeed.news2me.com!elnk-nf2-pas!newsfeed.earthlink.net!stamper.news.pas.earthlink.net!newsread3.news.pas.earthlink.net.POSTED!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: febea,993d3356a99ed86c,start
X-Google-Attributes: gidfebea,public
X-Google-ArrivalTime: 2003-08-23 07:20:05 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!sn-xit-03!sn-xit-06!sn-xit-09!supernews.com!newsfeed.news2me.com!elnk-nf2-pas!newsfeed.earthlink.net!stamper.news.pas.earthlink.net!newsread3.news.pas.earthlink.net.POSTED!not-for-mail
From: "(���) Guess Who" <nospam@yourisp.com>
Newsgroups: az.internet
Subject: SoBig virus Information 
Organization: Belle Meade Whiskey Tasting Society
Reply-To: nospam@yourisp.com
Message-ID: <91uekvof397enb9p7uq0e1hbbiddeet58r@4ax.com>
X-Newsreader: Forte Agent 1.8/32.548
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 62
Date: Sat, 23 Aug 2003 14:19:51 GMT
NNTP-Posting-Host: 171.75.17.152
X-Complaints-To: abuse@earthlink.net
X-Trace: newsread3.news.pas.earthlink.net 1061648391 171.75.17.152 (Sat, 23 Aug 2003 07:19:51 PDT)
NNTP-Posting-Date: Sat, 23 Aug 2003 07:19:51 PDT