I am tracking this individual and others. Here is what I need. double click on the email(don't open the attachment)now click the "File" tab, look for a "Properties" tab or icon and select it. Highlight all, copy, past in a post here. Use the "*****" to block out your "TO:****" information.
I am compiling the HASH/X-CNFS-Analysis/IP/ information to compile a targeted hunter script. FEDs need proof. So I need your help to build a tool to find this XXX. Also search your system for these files.(4D3EBFA9.DOC
invoice_cam.doc) It allows them in your system with out you knowing it. Run a good AV tool and Malware scanner in "safe mode" and "unplugged from the network". Here is my mail Property source code from that email.
Return-Path: mikes@camarketing.com
Received: from mx02.hughes.cmh.synacor.com (LHLO mx.hughes.net) (10.33.3.40)
by md04.hughes.cmh.synacor.com with LMTP; Thu, 8 Oct 2015 13:31:06 -0400
(EDT)
Return-Path:
X_CMAE_Category: 0,0 Undefined,Undefined
X-CNFS-Analysis: v=2.1 cv=W/ABC3mk c=1 sm=0 tr=0 a=CRlv44LHCzGnG60wdrVt0w==:117 a=CRlv44LHCzGnG60wdrVt0w==:17 a=K-v-2zaBAAAA:8 a=d6tszuHSAAAA:8 a=r77TgQKjGQsHNAKrUKIA:9 a=pOfvU1qiAAAA:8 a=ubZ28Wh8urYwgjWGvrQA:9 a=wPNLvfGTeEIA:10 a=r-FvCdHynN8A:10 a=6QK2aPe-vYMA:10 a=qcLfOj21m5AA:10 a=KpCnofbLErrsYcWXbEAA:9 a=fMZ_E1CIlfQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: mx02.hughes.cmh.synacor.com smtp.mail=mikes@camarketing.com; spf=neutral; sender-id=neutral
Authentication-Results: mx02.hughes.cmh.synacor.com header.from=mikes@camarketing.com; sender-id=neutral
Received-SPF: neutral (mx02.hughes.cmh.synacor.com: 67.59.68.99 is neither permitted nor denied by domain of camarketing.com)
Received: from [67.59.68.99] ([67.59.68.99:44233] helo=camarketing.com)
by mx.hughes.net (envelope-from )
(ecelerity 2.2.3.49 r(42060/42061)) with ESMTP
id 06/8F-12957-B48A6165; Thu, 08 Oct 2015 13:31:06 -0400
Message-ID:
Date: Thu, 08 Oct 2015 10:30:52 -0700
From: "Mike Scott"
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To:
Subject: Re: f******g money
Content-Type: multipart/mixed;
boundary="------------714868866142510838634470"
X-Priority: 1
I am tracking this individual and others. Here is what I need. double click on the email(don't open the attachment)now click the "File" tab, look for a "Properties" tab or icon and select it. Highlight all, copy, past in a post here. Use the "*****" to block out your "TO:****" information.
I am compiling the HASH/X-CNFS-Analysis/IP/ information to compile a targeted hunter script. FEDs need proof. So I need your help to build a tool to find this XXX. Also search your system for these files.(4D3EBFA9.DOC
invoice_cam.doc) It allows them in your system with out you knowing it. Run a good AV tool and Malware scanner in "safe mode" and "unplugged from the network". Here is my mail Property source code from that email.
Return-Path: mikes@camarketing.com
Received: from mx02.hughes.cmh.synacor.com (LHLO mx.hughes.net) (10.33.3.40)
by md04.hughes.cmh.synacor.com with LMTP; Thu, 8 Oct 2015 13:31:06 -0400
(EDT)
Return-Path:
X_CMAE_Category: 0,0 Undefined,Undefined
X-CNFS-Analysis: v=2.1 cv=W/ABC3mk c=1 sm=0 tr=0 a=CRlv44LHCzGnG60wdrVt0w==:117 a=CRlv44LHCzGnG60wdrVt0w==:17 a=K-v-2zaBAAAA:8 a=d6tszuHSAAAA:8 a=r77TgQKjGQsHNAKrUKIA:9 a=pOfvU1qiAAAA:8 a=ubZ28Wh8urYwgjWGvrQA:9 a=wPNLvfGTeEIA:10 a=r-FvCdHynN8A:10 a=6QK2aPe-vYMA:10 a=qcLfOj21m5AA:10 a=KpCnofbLErrsYcWXbEAA:9 a=fMZ_E1CIlfQA:10
X-CM-Score: 0
X-Scanned-by: Cloudmark Authority Engine
Authentication-Results: mx02.hughes.cmh.synacor.com smtp.mail=mikes@camarketing.com; spf=neutral; sender-id=neutral
Authentication-Results: mx02.hughes.cmh.synacor.com header.from=mikes@camarketing.com; sender-id=neutral
Received-SPF: neutral (mx02.hughes.cmh.synacor.com: 67.59.68.99 is neither permitted nor denied by domain of camarketing.com)
Received: from [67.59.68.99] ([67.59.68.99:44233] helo=camarketing.com)
by mx.hughes.net (envelope-from )
(ecelerity 2.2.3.49 r(42060/42061)) with ESMTP
id 06/8F-12957-B48A6165; Thu, 08 Oct 2015 13:31:06 -0400
Message-ID:
Date: Thu, 08 Oct 2015 10:30:52 -0700
From: "Mike Scott"
User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.4.0
MIME-Version: 1.0
To:
Subject: Re: f******g money
Content-Type: multipart/mixed;
boundary="------------714868866142510838634470"
X-Priority: 1
Caller type: Other
Caller: Mike Scoot
Company: camarketingcom
Number: 786-489-9929
Reply