One of most the frequently asked question is how to track an email back to the sender.That is how to determine the sender of the email? The most obvious answer is by looking at the "From:" line! But this does not work all the time since most of the spammers forge the email address or most of the spam that we get has a forged email address.This is also known as a spoofed email.Is it possible to send email from other's address?Yes it is possible to send email from anyone's name.Why not, you can send an email even from Bill Gate's Email ID.If you need a proof look here!
For more information on how to send a spoofed email refer this post.
OK now let's come back to the topic of email tracking.So how do you determine where a message actually came from?For that you have to understand how email messages are put together in order to backtrack an email message. SMTP is a text based protocol for transferring messages across the internet. A series of headers are placed in front of the data portion of the message. By examining the headers you can usually backtrack a message to the source network, sometimes the source host. A more detailed essay on reading email headers can be found .
If you are using Outlook or Outlook Express you can view the headers by right clicking on the message and selecting properties or options.
Below are listed the headers of an actual spam message.I have double spaced the headers to make them more readable.
Return-Path: <s359dyxtt@yahoo.com>
X-Original-To: sriki@example.com
Delivered-To: sriki@example.com
Received: from 12-218-172-108.client.mchsi.com (12-218-172-108.client.mchsi.com [12.218.172.108])by mailhost.example.com (Postfix) with SMTP id 1F9B8511C7for <sriki@example.com>; Sun, 16 Nov 2003 09:50:37 -0800 (PST)
Received: from (HELO 0udjou) [193.12.169.0] by 12-218-172-108.client.mchsi.com with ESMTP id <536806-74276>; Sun, 16 Nov 2003 19:42:31 +0200
Message-ID: <n5-l067n7z$46-z$-n@eo2.32574>
From: "Maricela Paulson" <s359dyxtt@yahoo.com>
Reply-To: "Maricela Paulson" <s359dyxtt@yahoo.com>
To: sriki@example.com
Subject: You Have won $10000 in US Lottery Scheme
Date: Sun, 16 Nov 2003 19:42:31 +0200
X-Mailer: Internet Mail Service (5.5.2650.21)
X-Priority: 3
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="MIMEStream=_0+211404_90873633350646_4032088448"
According to the From header this message is from Maricela Paulson at s359dyxxt@yahoo.com. I could just fire off a message to abuse@yahoo.com, but that would be waste of time. This message didn't come from yahoo's email service.
The header most likely to be useful in determining the actual source of an email message is the Received header. According to the top-most Received header this message was received from the host 12-218-172-108.client.mchsi.com with the ip address of 21.218.172.108 by my server mailhost.example.com. An important item to consider is at what point in the chain does the email system become untrusted? I consider anything beyond my own email server to be an unreliable source of information. Because this header was generated by my email server it is reasonable for me to accept it at face value.
The next Received header (which is chronologically the first) shows the remote email server accepting the message from the host 0udjou with the ip 193.12.169.0. Those of you who know anything about IP will realize that that is not a valid host IP address. In addition, any hostname that ends in client.mchsi.com is unlikely to be an authorized email server. This has every sign of being a cracked client system.
Here's is where we start digging. By default Windows is somewhat lacking in network diagnostic tools; however, you can use the tools at to do your own checking.
sriki@nqh9k:[/home/sriki] $whois 12.218.172.108 AT&T WorldNet Services ATT (NET-12-0-0-0-1)12.0.0.0 - 12.255.255.255Mediacom Communications Corp MEDIACOMCC-12-218-168-0-FLANDREAU-MN (NET-12-218-168-0-1)12.218.168.0 - 12.218.175.255
# ARIN WHOIS database, last updated 2003-12-31 19:15# Enter ? for additional hints on searching ARIN's WHOIS database.
I can also verify the hostname of the remote server by using nslookup, although in this particular instance, my email server has already provided both the IP address and the hostname.
sriki@nqh9k:[/home/sriki] $nslookup 12.218.172.108
Server: localhostAddress: 127.0.0.1
Name: 12-218-172-108.client.mchsi.comAddress: 12.218.172.108
Ok, whois shows that Mediacom Communications owns that netblock and nslookup confirms the address to hostname mapping of the remote server,12-218-172-108.client.mchsi.com. If I preface a www in front of the domain name portion and plug that into my web browser, http://www.mchsi.com/, I get Mediacom's web site.
There are few things more embarrassing to me than firing off an angry message to someone who is supposedly responsible for a problem, and being wrong. By double checking who owns the remote host's IP address using two different tools (whois and nslookup) I minimize the chance of making myself look like an idiot.
A quick glance at the web site and it appears they are an ISP. Now if I copy the entire message including the headers into a new email message and send it to abuse@mchsi.com with a short message explaining the situation, they may do something about it.
But what about Maricela Paulson? There really is no way to determine who sent a message, the best you can hope for is to find out what host sent it. Even in the case of a PGP signed messages there is no guarantee that one particular person actually pressed the send button. Obviously determining who the actual sender of an email message is much more involved than reading the From header. Hopefully this example may be of some use to other forum regulars.
Email Tracking
Change IP Address
How to change your IP address in less than a minute? The following trick gives you a step-by-step procedure to change your IP address.
1. Click on "Start" in the bottom left hand corner of screen.
2. Click on "Run".
3. Type in "command" and hit ok.You should now be at an MSDOS prompt screen.
4. Type "ipconfig /release" just like that, and hit "enter".
5. Type "exit" and leave the prompt.
6. Right-click on "Network Places" or "My Network Places" on your desktop.
7. Click on "properties".
You should now be on a screen with something titled "Local Area Connection", or something close to that.
8. Right click on "Local Area Connection" and click "properties".
9. Double-click on the "Internet Protocol (TCP/IP)" from the list under the "General" tab.
10. Click on "Use the following IP address" under the "General" tab.
11. Create an IP address (It doesn't matter what it is. I just type 1 and 2 until i fill the area up).
12. Press "Tab" and it should automatically fill in the "Subnet Mask" section with default numbers.
13. Hit the "Ok" button here.
14. Hit the "Ok" button again.You should now be back to the "Local Area Connection" screen.
15. Right-click back on "Local Area Connection" and go to properties again.
16. Go back to the "TCP/IP" settings.
17. This time, select "Obtain an IP address automatically".
18. Hit "Ok".
19. Hit "Ok" again.
20. You now have a new IP address.
Some ISPs do not support this type of procedure and hence there are chances of getting back the same old IP address even after trying this hack.In this case you need to switch off the modem and then switch it on to get the new IP address.
NOTE: All these tricks works only if you have a dynamic IP address.But if you have a static IP address you have no option to change your IP.
How To Disable Windows Logo Key?
At times it becomes necessary to disable the Windows Key on the keyboard.For example when playing games this nasty Windows Logo key keeps annoying , as we often accidently press it and this takes our game out to the desktop.So it becomes necessary to disable it when not needed an re-enable it when needed.
The following download consists of two registry scripts (.reg) one to disable windows key and the other to re-enable it.In this download there are two files
disable_winlogo_key.reg - Disable Windows Logo Ley
re-enable_winlogo_key.reg - Re-Enable Windows Logo Key
DOWNLOAD
What to Do when Ur Orkut is Hacked!
Here are some options suggested by Google Support when you forget the Gmail password or if someone else takes ownership of your Google Account and changes the password:
1. Reset Your Google Account Password:
Type the email address associated with your Google Account or Gmail user name at google.com/accounts/ForgotPasswd - you will receive an email at your secondary email address with a link to reset your Google Account Password.
This will not work if the other person has changed your secondary email address or if you no longer have access to that address.
2. For Google Accounts Associated with Gmail:
If you have problems while logging into your Gmail account, you can consider contacting Google by filling this form. It however requires you to remember the exact date when you created that Gmail account.
3. For Hijacked Google Accounts Not Linked to Gmail:
If your Google Account doesn’t use a Gmail address, contact Google by filling this form. This approach may help bring back your Google Account if you religiously preserve all your old emails. You will be required to know the exact creation date of your Google Account plus a copy of that original “Google Email Verification” message.
It may be slightly tough to get your Google Account back but definitely not impossible if you have the relevant information in your secondary email mailbox.
SONY ERICSSON ZONE
chek it ..
games -
new games bt nt in 128*160 size
GTA_vice_city
http://www.4shared.com/file/22169990/63
Need_For_Speed_Most_Wanted
http://www.4shared.com/file/16148814/15
Mortal_Kombat
http://www.4shared.com/file/23330333/53
Gta_San_Andreas
http://www.4shared.com/file/23543348/fd
Need_For_Speed_UnderGround_2
http://www.4shared.com/file/14660088/f6
mission_impossible_iii
http://www.4shared.com/file/379
All r Adventure GAMES so downloads n enjoy
Super_Mario_Bros
http://www.4shared.com/file/21776748/50
transformers
http://www.4shared.com/file/22545878/59
Rambo
http://www.4shared.com/file/19007763/5f
Spider-Man3
http://www.4shared.com/file/18375665/8f
Fantastic Four Silver Surfer
http://www.4shared.com/file/22653006/61
Prince Of Persia - 3 - Worrior Within
http://www.4shared.com/file/22536999/11
lost
http://www.4shared.com/file/21557612/43
Gangstar-Crime City
http://www.4shared.com/file/20109672/49
medal of honor air bornel
http://www.4shared.com/file/22136023/86
Pirates_Of_The_Caribbean_2-Dead_Mans_Che
http://www.4shared.com/file/19223573/fd
Power Rangers -SPD
The_Simpsons
http://www.4shared.com/file/22861164/f1
Tennis_Open_2007
http://www.4shared.com/file/19766261/9d
Splinter_Cell_3D_Paradise_Tomorrow
http://www.4shared.com/file/19766257/5f
Real_football_2008
http://www.4shared.com/file/24482940/8d
Shrek The Third
http://www.4shared.com/file/22894915/8c
Blades
http://www.4shared.com/file/24177769/29
The_Sims_2_Pets
http://www.4shared.com/file/22861579/6f
Ultimate street Football
http://www.4shared.com/file/21091161/20
Sim_City
http://www.4shared.com/file/22861534/75
http://www.4shared.com/file/18488484/85
Fifa_2007
http://www.4shared.com/file/10811789/40
The_Simpsons
http://www.4shared.com/file/22861164/f1
Real_football_2008
http://www.4shared.com/file/24482940/8d
Age_Of_Empires_III
http://www.4shared.com/file/23403667/67
DogZ_3D
http://www.4shared.com/file/25205771/6f
EA_MOHA
http://www.4shared.com/file/23501554/b6
Sim_City
http://www.4shared.com/file/22861534/75
Pirates Of 7 Seas
http://www.4shared.com/file/20671107/50
Prince_Of_Persia_3_-_The_Two_Thrones
http://www.4shared.com/file/23236940/66
Heroes
http://www.4shared.com/file/26494052/fa
need_for_speed_underground
http://www.4shared.com/file/22972695/1e
Shrek The Third
http://www.4shared.com/file/22894915/8c
NitroStreet
http://www.4shared.com/file/27373499/5f
might-and-magic-ii
http://www.4shared.com/file/26241789/c4
WARCRAFT_3
http://www.4shared.com/file/26115742/3e
MTV_Pimp_My_Ride [ As seen in VH1 ]
http://www.4shared.com/file/25885601/d9
driver_la
http://www.4shared.com/file/21090820/84
3D_Counter_Sricker
http://www.4shared.com/file/23370489/a0
CSI_Miami
http://www.4shared.com/file/25475028/63
Super_Mario_Bros
http://www.4shared.com/file/24779782/16
Freestyle_Moto_X2 [super game]
http://www.4shared.com/file/19766157/5d
Robot_Alliance_3D [just_like_Quake_2]
http://www.4shared.com/file/19766093/f7
Resident_Evil_The_Mission
http://www.4shared.com/file/27154360
file lock
http://www.4shared.com/file/20262957/97
Bluetooth Messenger
http://www.4shared.com/file/24251960/83
Battery_Maintenance
http://www.4shared.com/file/26897852/91
Microsoft_Word
http://www.4shared.com/file/27537800/52
Microsoft_Mini Excel
http://www.4shared.com/file/27537802/bc
Windows_Media_Player
http://www.4shared.com/file/21366248/f0
Mobile Pdf
http://www.4shared.com/file/21802848/97
mToolbox_FULL_VERSION
http://www.4shared.com/file/11206404/53
Mobile_Google_Earth
http://www.4shared.com/file/23394833/9a
BT_Info
http://www.4shared.com/file/14267620/fb
Compass
http://www.4shared.com/file/22781618/2c
MobiLuck_Bluetooth_Messenger
http://www.4shared.com/file/14630732/38
Orkut
http://www.4shared.com/file/23108851/28
Advanced_English_Dictionary
http://www.4shared.com/file/16412190/22
Battery_Maintenance
http://www.4shared.com/file/18396616/f4
http://www.4shared.com/file/26585062/9f
http://www.4shared.com/file/21658940/51
source
www.getjar.com
Assassins Creed [ now playing this gr8 game]
http://www.4shared.com/file/26881809/63
Racing Game's
Turbo Jetski 3D
http://www.4shared.com/file/22858566/dc
Asphalt Street Rules 3 3D
http://www.4shared.com/file/18545487/6d
EA NEED FOR SPEED CARBON
http://www.4shared.com/file/21692506/2b
Super Taxi Driver
http://www.4shared.com/file/21617296/f8
V-Rally 3D[multi player can with bluetooth with sony phone]
http://www.4shared.com/file/22220369/9e
Need For Speed Pro-Street
http://www.4shared.com/file/26881699/b8
Burnout 2D
http://www.4shared.com/file/22333077/86
Some SE themes
http://www.4shared.com/file/36570049/43
http://www.4shared.com/file/36570129/14
http://www.4shared.com/file/36570196/67
http://www.4shared.com/file/36570288/9b
http://www.4shared.com/file/36570433/eb
http://www.4shared.com/file/36570445/4d
http://www.4shared.com/file/36570721/1e
Yahoo Chat Commands and some tricks
/cls Clears the history
/help Displays this message
/join roomname Joins room 'roomname'
/goto username Goes to 'username'
/think xxx . o O (xxx)
/follow user Follows the user wherever they go
/follow Stop Following
/invite username Invites 'username' to join this room : emotion Displays user defined emotion string
/think-- will get you . o O ( ........ ) just type /think whatever.....and get . o O ( whatever ) ...doesn't seem to work in messenger chat though......java /cheeta/ychat/cheeta users if they just type /think will have a random message inserted
/roll 2-- will get you something like 'fire-wall rolls 2 dice 3,4' ........to roll multisided dice type /roll 2:10
try /roll 2x2 to flip coins
/tell ( name )-- allows you to send a private message with out a pm box
/goto ( name ) lets you go to a friend or another user
/invite ( name )-- allows you to invite a user to where you are
/follow ( name )-- allows you to follow someone
/stopfollow( name )-- stops you following someone else.... no way to stop someone from following you. :cry: :cry:
/cls-- clears the screen
/help-- works great in java chat!!! be prepared for a full screen of info though.
/define-- works in cheeta chat
/time-- works in most clients
/version or /ver --the latter is great for when you need help.........and /version helpers name sends them a private message with the same info so they can help.
/join (roomname) is great for skipping the rooms list......like
/join yahoo! chat help:1
to emote without using the pop up emotes or the list just type /emote name .......like /hug or to emote someone /hug ( name) and to make your text show as an emote .....type a : then whatever.....and your text will look like an emote like Fire-wall hugs you
/ignore add (username) a quick way to send someone to the iggy box.....
/ignore remove (username) can take an accidental ignore off..... or even remove yourself form your own ignore.... don't laugh.... it has happened!!! despite yahoo saying you cant ignore yourself. you can also open messenger, look under privacy, and remove names there.
/save works in all but messenger (click file. then save for messenger chat)........in browser chat make sure you know where it saves the transcript!!!!!
/logoff closes your chat screen and logs you out
XP SETUP -- Microsoft Error codes
"Stop: 0x0000001E" Error Message During Setup
Q216251
How to Specify a Specific or Third-Party HAL During Windows Setup
Q217073
Windows Setup Hangs When "Setup Is Starting Windows" Screen Appears
Q220845
Adding Third-Party or Updated Driver During Windows Setup
Q221447
Autologon and AutoLogonCount Parameters for Windows Unattended Setup
Q222939
Windows Setup Does Not Prompt for Installation Folder
Q225125
Windows Setup Does Not Prompt for Installation Folder
Q225125
Limited OEM Driver Support with F6 During Windows Setup
Q238955
How to Use Cmdlines.txt File During Sysprep.exe Setup Wizard
Q242380
How to Use a Command Prompt During GUI-Mode Setup
Q281652
Error Message "Setup Was Unable to Build the List of Files to Be Copied" During a Windows XP Unattended Installation
Q281653
Setup Appears to Stop Responding at the Registering Components Screen During an Unattended Installation
Q282008
Partitions Created by Using PartitionMagic 5.0 Appear Inactive in Windows XP Setup
Q282296
Setup from the 16-Bit Winnt.exe File Continues in an Endless Loop
Q283079
No Mouse or Keyboard Response During Sysprep Mini-Setup
Q283240
Quitting Text-Mode Setup Does Not Restart the Computer
Q283332
Setup Stops Responding Upon Restart After You Install Windows XP to a Partition on an IA64 Computer
Q287546
Missing Files" Error Message During Setup When Deploying Windows XP Images
Q289657
Out of Box Experience (OOBE) Does Not Run After Setup Completes
Q293281
Unpartitioned Space Remains When Creating a Partition During Setup
Q293834
User Accounts That You Create During Setup Are Administrator Account Types
Q295116
A Description of the Windows XP Setup Function Keys
Q296673
Windows Services for UNIX 2.0 Setup Does Not Work on Windows XP
Q296814
Setup Stops Responding (Hangs) During File Copy
Q297837
The CD-ROM Drive May Not Be Accessible During Setup on Computers That Have DirectCD Installed
Q301340
During Setup You Are Unable to Format a Partition with a File Allocation Table Format
Q301933
Error Message: Setup Was Unable to Build the List of Files to Be Copied. The System Cannot Find the Path...
Q302686
Differences Between a Quick Format and Format During Windows XP Setup
Q303466
Master Boot Record Disks Cannot Be Converted to GPT by Means of an Unattended Setup
Q305746
Windows XP Setup Halts When You Start Installation from Within Windows 95
Q305883
Windows Upgrade Advisor Quits Abruptly During System Compatibility Check and No Report Appears
Q307099
STOP 7b Error Occurs When You Press F6 to Load Drivers During Unattended Windows XP Setup
Q307316
Volume License Product ID Is Revealed During the Sysprep.exe Mini-Setup Wizard
Q309800
Serial Mouse Is Not Detected During Windows XP Setup
Q310637
Troubleshooting Invalid CD Key Error Message During Windows XP Setup
Q310760
Windows XP Does Not Respond at "Setup Is Starting Windows XP" Message
-
Description The Ubiquiti UniFi Network Application versions 5.13.29 through 6.5.53 are affected by the Log4Shell vulnerability whereby a...
-
http://www.toolbase.blogspot.com * 007 Spy Software (1) * 100 Million Words Password List 850MB (1) * 101 Hacker Programs 2007 (1) * 102 Bot...
-
Privacy Shield erases data by using government-level removal techniques. It completely cleans your computer of any Internet or Windo...
BTemplates.com
-
Blogroll
-
About










