Here's one file I received..

To: [EMAIL PROTECTED] 
Date: Fri, 26 Dec 2003 21:06:04 +0000 
      
Hi, ehughes

Have a look the Pic attached !! 
 

Notice the line TO:
It is address to [EMAIL PROTECTED] 
but I recieved it in my mail!

Here's the bounced mail:


<[EMAIL PROTECTED]>  
To: [EMAIL PROTECTED] 
sender 
Date: Fri, 26 Dec 2003 20:55:11 +0000 
      
 


This message was created automatically by mail
delivery software.

A message that you sent could not be delivered to one
or more of its
recipients. This is a permanent error. The following
address(es) 
failed:

  [EMAIL PROTECTED]
    host lookup did not complete: retry timeout
exceeded
  [EMAIL PROTECTED]
    Connection timed out:
    retry timeout exceeded
  [EMAIL PROTECTED]
    SMTP error from remote mailer after RCPT
TO:<[EMAIL PROTECTED]>:
    host keystone.cmp.com [192.155.65.22]: 553 5.3.0
<[EMAIL PROTECTED]>... 
Mail from 195.92.137.107 rejected - see
http://www.mail-abuse.org/rbl/
  [EMAIL PROTECTED]
    Unrouteable address

------ This is a copy of the message, including all
the headers. ------
------ The body of the message is 85288 characters
long; only the first
------ 65536 or so are included here.

Return-path: <[EMAIL PROTECTED]>
Received: from user-1286.l3.c2.dsl.pol.co.uk
([81.77.133.6] 
helo=localhost)
        by tmailt1.svr.pol.co.uk with smtp (Exim 4.14)
        id 1AZyxD-0003Dk-Mh; Fri, 26 Dec 2003 20:53:04 +0000
Reply-To: <[EMAIL PROTECTED]>
X-Priority: 3 (Normal)
X-MailScanner: Found to be clean
To: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed; 
boundary="NVSYwvvcVCoHYJsHQtfoiKNNELLUXKHE"
Message-Id: 
<[EMAIL PROTECTED]>
Date: Fri, 26 Dec 2003 20:53:04 +0000

--NVSYwvvcVCoHYJsHQtfoiKNNELLUXKHE
Content-Type: multipart/alternative; 
boundary="fcuwvPCkHDnrNLfhyocaoKBsTRcCDlBA"

--fcuwvPCkHDnrNLfhyocaoKBsTRcCDlBA
Content-Type: text/plain;
Content-Transfer-Encoding: quoted-printable

Send me your comments.

--fcuwvPCkHDnrNLfhyocaoKBsTRcCDlBA
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>
Send me your comments.<iframe src=3Dcid:pwargmfGueJQH
height=3D0 
width=3D0></iframe>
</BODY></HTML>

--fcuwvPCkHDnrNLfhyocaoKBsTRcCDlBA--

--NVSYwvvcVCoHYJsHQtfoiKNNELLUXKHE
Content-Type: application/x-msdownload;
        name="document.doc.pif"
Content-ID: <pwargmfGueJQH>
Content-Transfer-Encoding: base64
Content-Disposition: attachment

Below here is an encoded attachment.....


--- Declan Moriarty <[EMAIL PROTECTED]> wrote:
> On Thu, Dec 25, 2003 at 03:14:20PM -0800, rhonn
> tabanao enlightened us thusly
> > Is it possible to get infected by just
> opening/reading
> > the email without downloading the attach file?
> > I run an updated AVG scan but can't find any
> > infection..
> 
> As you have been told, you could well be clean, but
> someone else is
> infected with a virus that pick an e-mail from his
> address book(your
> email) and uses it as the from address.
> 
> Post the "Received from" headers of one of these
> bounced e-mails and 
> I'll look it up for you. It's handy under linux.
> -- 
> 
>       With best Regards,
> 
> 
>       Declan Moriarty.
> -- 
> Author: Declan Moriarty
>   INET: [EMAIL PROTECTED]
> 
> Fat City Network Services    -- 858-538-5051
> http://www.fatcity.com
> San Diego, California        -- Mailing list and web
> hosting services
>
---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an
> E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of
> 'ListGuru') and in
> the message BODY, include a line containing: UNSUB
> CHIPDIR-L
> (or the name of mailing list you want to be removed
> from).  You may
> also send the HELP command for other information
> (like subscribing).


=====
Ronnie B. Tabanao 
Everything Electronics Services 
#06 Juan Luna St.,La Castellana,Negros Occidental 
6131 Philippines

__________________________________
Do you Yahoo!?
New Yahoo! Photos - easier uploading and sharing.
http://photos.yahoo.com/
-- 
Author: rhonn tabanao
  INET: [EMAIL PROTECTED]

Fat City Network Services    -- 858-538-5051 http://www.fatcity.com
San Diego, California        -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB CHIPDIR-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).

Reply via email to