I just tracked down a client sending out spam via dialup connection. I doubt they even know it happened. Anyone seen this before? I think that they must have a virus or worm that did this.
Received: from adornmen.com [207.231.66.244] by ncwebsurfer.com with ESMTP (SMTPD32-8.03) id AC253E6E0228; Wed, 05 Nov 2003 10:06:29 -0800 Message-ID: <[EMAIL PROTECTED]> From: "Brittne Uppal" <[EMAIL PROTECTED]> Subject: Buy viagraST, prozac, Fioricet, zanaflex nayuxidesgeqkblyrzf Date: Wed, 05 Nov 2003 18:06:48 +0000 MIME-Version: 1.0 Content-Type: text/html Content-Transfer-Encoding: 8bit X-IMAIL-SPAM-VALHELO: (1047396904) X-IMAIL-SPAM-VALFROM: (1047396904) X-RBL-Warning: WEIGHT10: Weight of 15 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [207.231.66.244] X-Declude-Spoolname: D3c253e6e022892c9.SMD Order some viagrast, Soma Online <a href="http://[EMAIL PROTECTED] bxrcbot.bswvbicjxiocdibahiahbfuj.propouvr.biz/vpr6636/?href=www.bbbrsqdjlif. mhsgocqrlnk.jdejopcufpilvddehejfbujvquljbojchcuqymblywccrek">proceed here</a><br> lkugbybxpf tyzzrjczxgmpld jsvrincshoymab --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
