[Declude.Virus] Possibly New Virus?

Jeff Maze - Hostmaster Thu, 29 Apr 2004 07:26:27 -0700

Hello,
        Just wanted to write to let ya'll know about a message that I
received today (Scott, I've forwarded the original message to the virustrap
e-mail account for review).  Maybe someone has already seen this, but this
is a first for me.  Neither F-Prot on the server nor Norton Anti-virus 2004
on my locally machine hit on this.  Declude Junkmail caught this thus the
reason I ended up seeing it.  
        The names of the "TO:" recipients has been changed to protect the
innocent (haha).


        This is the ingredients of the message:

From: Clipperp ([EMAIL PROTECTED])
Subject: RE: Incoming Msg
Attachments: "You_will_answer_to_me.zip" (147b)

Body (HTML):
For security purposes the attached file is password protected.  Password --
43561

HTML Code:
<html><body>
 


<br>For security purposes the attached  file is password protected. Password
-- <img src="cid:oaxudqhplk.gif";><br>
<br>
</body></html>

_____Internet Headers___
Received: from dzrostlik2.com [208.17.119.7] by mail.crescentdigital.com
  (SMTPD32-6.06) id A2D24F40106; Thu, 29 Apr 2004 09:27:46 -0400
Date: Thu, 29 Apr 2004 08:26:08 -0600
To: "Me" <[EMAIL PROTECTED]>
From: "Clipperp" <[EMAIL PROTECTED]>
Subject: RE: Incoming Msg
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="--------qbnzwdjpfmkqdeghmlqc"
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: NOPOSTMASTER: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'aol.com' found: Address of
[EMAIL PROTECTED] sent from invalid infoserverx.stellar-industries.com.
X-RBL-Warning: HELOBOGUS: Domain dzrostlik2.com has no MX or A records
[0301].
X-Declude-Sender: [EMAIL PROTECTED] [208.17.119.7]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, SPAMDOMAINS, HELOBOGUS,
WEIGHT10, WEIGHT20 [23]
X-Note: This E-mail was sent from infoserverx.stellar-industries.com
([208.17.119.7]).
X-RCPT-TO: <[EMAIL PROTECTED]>
X-UIDL: 383206833
Status: U


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

[Declude.Virus] Possibly New Virus?

Reply via email to