Forum Moderators: buckworks & skibum

Message Too Old, No Replies

Virus email

         

Bluepixel

8:06 pm on Aug 9, 2004 (gmt 0)

10+ Year Member



I just got a trojan or virus (I guess, no subject, "price" as text, and a zip file, with a html file exploiting an IE Bug and loading an exe) as attachement to my adwords account email which I only use for google adwords.
What's strange is that I never used that email anywhere else (it's adwords@ somedomain I don't use adwords on) and that the following line appears in the header:
"Received: from jchandler-corp.com (216-239-45-4.google.com [216.239.45.4]) by". Was the email actually send through one of google's servers, or was jchandler-corp.com the true host?

Has anybody else got such an email to his/her adwords email?

conor

12:42 pm on Aug 11, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Looks like the virus has spoofed the header to me.

roitracker

5:13 pm on Aug 11, 2004 (gmt 0)

10+ Year Member



If that's the complete email header, it looks like someone at Googleplex has a virus.

jchandler-corp.com doesn't resolve so that part could be spoofed, but you can't spoof the final [IP] (ie. the IP in square brackets part) - & the IP you posted does resolve to Google.

AdWordsAdvisor

5:30 pm on Aug 11, 2004 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just thought I'd jump in, and say that after the first post I alerted the tech team on this end, and asked them to look into it. So if there was a virus, It'll be long gone by now!

In any case, thanks for the heads up. This forum has truly been an excellent 'early warning' system for AdWords related issues, for as long as I've been a part of it (over a year now, which shocks me) - and I very much appreciate it.

AWA