BANNED FILENAME (.exe) IN MAIL FROM YOU

2005-08-17 Thread amavisd-new
BANNED CONTENTS ALERT

Our content checker found
banned name: .exe
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

The message has been blocked because it contains a component
(as a MIME part or nested within) with declared name
or MIME type or contents type violating our access policy.

To transfer contents that may be considered risky or unwanted
by site policies, or simply too large for mailing, please consider
publishing your content on the web, and only sending an URL of the
document to the recipient.

Depending on the recipient and sender site policies, with a little
effort it might still be possible to send any contents (including
viruses) using one of the following methods:

- encrypted using pgp, gpg or other encryption methods;

- wrapped in a password-protected or scrambled container or archive
  (e.g.: zip -e, arj -g, arc g, rar -p, or other methods)

Note that if the contents is not intended to be secret, the
encryption key or password may be included in the same message
for recipient's convenience.

We are sorry for inconvenience if the contents was not malicious.

The purpose of these restrictions is to cut the most common propagation
methods used by viruses and other malware. These often exploit automatic
mechanisms and security holes in certain mail readers (Microsoft mail
readers and browsers are a common and easy target). By requiring an
explicit and decisive action from the recipient to decode mail,
the dangers of automatic malware propagation is largely reduced.


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
Received: from minder.net (host217-35-96-228.in-addr.btopenworld.com 
[217.35.96.228])
by gilmore.ael.be (Postfix) with ESMTP id A3016173465
for <[EMAIL PROTECTED]>; Wed, 17 Aug 2005 16:47:07 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Returned mail: Data format error
Date: Wed, 17 Aug 2005 15:45:21 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0007_51A8B051.CCE73B11"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; gilmore.ael.be
Received-From-MTA: smtp; gilmore.ael.be ([127.0.0.1])
Arrival-Date: Wed, 17 Aug 2005 16:47:15 +0200 (CEST)

Final-Recipient: rfc822; nicolas.pettiaux@gmail.com
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=05345-05 - BANNED: .exe
Last-Attempt-Date: Wed, 17 Aug 2005 16:47:16 +0200 (CEST)
Received: from minder.net (host217-35-96-228.in-addr.btopenworld.com [217.35.96.228])
	by gilmore.ael.be (Postfix) with ESMTP id A3016173465
	for <[EMAIL PROTECTED]>; Wed, 17 Aug 2005 16:47:07 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Returned mail: Data format error
Date: Wed, 17 Aug 2005 15:45:21 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0007_51A8B051.CCE73B11"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Email-Worm.Win32.NetSky.c) IN MAIL FROM YOU

2005-07-12 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Email-Worm.Win32.NetSky.c
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
Received: from gak.at (h081217013066.dyn.cm.kabsi.at [81.217.13.66])
by c2.aboliton.at (Postfix) with ESMTP id 4CDFE51C17B
for <[EMAIL PROTECTED]>; Tue, 12 Jul 2005 15:28:27 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: dear
Date: Tue, 12 Jul 2005 15:28:34 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0006_2655.69E8"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; c2
Received-From-MTA: smtp; c2.aboliton.at ([127.0.0.1])
Arrival-Date: Tue, 12 Jul 2005 15:28:29 +0200 (CEST)

Final-Recipient: rfc822; web1p1@c2.aboliton.at
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=26242-02 - VIRUS: Email-Worm.Win32.NetSky.c
Last-Attempt-Date: Tue, 12 Jul 2005 15:28:30 +0200 (CEST)
Received: from gak.at (h081217013066.dyn.cm.kabsi.at [81.217.13.66])
	by c2.aboliton.at (Postfix) with ESMTP id 4CDFE51C17B
	for <[EMAIL PROTECTED]>; Tue, 12 Jul 2005 15:28:27 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: dear
Date: Tue, 12 Jul 2005 15:28:34 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0006_2655.69E8"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (W32/[EMAIL PROTECTED]) IN MAIL FROM YOU

2005-06-14 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: W32/[EMAIL PROTECTED]
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Extended Mail
Date: Tue, 14 Jun 2005 09:11:32 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
-- END HEADERS --
Reporting-MTA: dns; rubens
Arrival-Date: Tue, 14 Jun 2005 09:11:30 +0200 (CEST)

Final-Recipient: rfc822; frank.buechler@westphalen-law.com
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=XXh0wqlp - VIRUS: W32/Netsky.p@MM
Last-Attempt-Date: Tue, 14 Jun 2005 09:11:35 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Extended Mail
Date: Tue, 14 Jun 2005 09:11:32 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal


VIRUS (W32/[EMAIL PROTECTED]) IN MAIL FROM YOU

2005-06-13 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: W32/[EMAIL PROTECTED]
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Mail Server
Date: Mon, 13 Jun 2005 09:08:57 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
-- END HEADERS --
Reporting-MTA: dns; rubens
Arrival-Date: Mon, 13 Jun 2005 09:08:56 +0200 (CEST)

Final-Recipient: rfc822; remo.laschet@westphalen-law.com
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=XXN1dxrA - VIRUS: W32/Netsky.p@MM
Last-Attempt-Date: Mon, 13 Jun 2005 09:09:01 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Mail Server
Date: Mon, 13 Jun 2005 09:08:57 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal


BANNED FILENAME (.exe) IN MAIL FROM YOU

2005-06-12 Thread amavisd-new
BANNED FILENAME ALERT

Our content checker found
banned name: .exe
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

The message has been blocked because it contains a component
(as a MIME part or nested within) with declared name
or MIME type or contents type violating our access policy.

With a little effort it is still possible to send ANY contents
(including viruses) using one of the following methods:

- encrypted using pgp, gpg or other encryption methods;

- wrapped in a password-protected or scrambled container or archive
  (e.g.: zip -e, arj -g, arc g, rar -p, or other methods)

Note that if the contents is not intended to be secret, the
encryption key or password may be included in the same message
for recipient's convenience.

We are sorry for inconvenience if the contents was not malicious.

The purpose of these restrictions is to cut the most common propagation
methods used by viruses and other malware. These often exploit automatic
mechanisms and security holes in certain mail readers (Microsoft mail
readers and browsers are a common and easy target). By requiring an
explicit and decisive action from the recipient to decode mail,
the dangers of automatic malware propagation is largely reduced.


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
Received: from minder.net (unknown [217.17.239.75])
by post.web.ca (Postfix) with ESMTP id EC74155CA
for <[EMAIL PROTECTED]>; Sun, 12 Jun 2005 05:37:23 -0400 (EDT)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Mail Transaction Failed
Date: Sun, 12 Jun 2005 12:37:08 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0012_37243724.66D566D5"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; woof.web.ca
Received-From-MTA: smtp; post.web.ca ([127.0.0.1])
Arrival-Date: Sun, 12 Jun 2005 05:37:47 -0400 (EDT)

Final-Recipient: rfc822; apolnet-l@list.web.ca
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=02739-01-37 - BANNED: .exe
Last-Attempt-Date: Sun, 12 Jun 2005 05:37:48 -0400 (EDT)
Received: from minder.net (unknown [217.17.239.75])
	by post.web.ca (Postfix) with ESMTP id EC74155CA
	for <[EMAIL PROTECTED]>; Sun, 12 Jun 2005 05:37:23 -0400 (EDT)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Mail Transaction Failed
Date: Sun, 12 Jun 2005 12:37:08 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0012_37243724.66D566D5"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (W32/Netsky-P) IN MAIL FROM YOU

2005-06-09 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: W32/Netsky-P
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
Received: from mail.capsecur.com (unknown [192.168.0.254])
by mailhost.capsecur.com (Postfix) with ESMTP id 240C0743BB
for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:16 +0200 (CEST)
Received: from deliver1.completel.net (deliver.completel.net [83.145.110.26])
by mail.capsecur.com (Postfix) with ESMTP id 09954EA41D
for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:19 +0200 (CEST)
Received: from mx1b.completel.net (mx1b.completel.net [83.145.110.8])
by deliver1.completel.net (Postfix) with ESMTP id C4DC825C5B5
for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:18 +0200 (CEST)
Received: from capsecur.com (AGrenoble-152-1-43-5.w82-122.abo.wanadoo.fr 
[82.122.139.5])
by mx1b.completel.net (Postfix) with ESMTP id CFBBD25C046
for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:01 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: important
Date: Thu, 9 Jun 2005 09:39:07 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail.capsecur.com
Received-From-MTA: smtp; mailhost.capsecur.com ([127.0.0.1])
Arrival-Date: Thu,  9 Jun 2005 09:39:16 +0200 (CEST)

Final-Recipient: rfc822; herrera_e@capsecur.com
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=00843-10 - VIRUS: W32/Netsky-P
Last-Attempt-Date: Thu,  9 Jun 2005 09:39:16 +0200 (CEST)
Received: from mail.capsecur.com (unknown [192.168.0.254])
	by mailhost.capsecur.com (Postfix) with ESMTP id 240C0743BB
	for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:16 +0200 (CEST)
Received: from deliver1.completel.net (deliver.completel.net [83.145.110.26])
	by mail.capsecur.com (Postfix) with ESMTP id 09954EA41D
	for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:19 +0200 (CEST)
Received: from mx1b.completel.net (mx1b.completel.net [83.145.110.8])
	by deliver1.completel.net (Postfix) with ESMTP id C4DC825C5B5
	for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:18 +0200 (CEST)
Received: from capsecur.com (AGrenoble-152-1-43-5.w82-122.abo.wanadoo.fr [82.122.139.5])
	by mx1b.completel.net (Postfix) with ESMTP id CFBBD25C046
	for <[EMAIL PROTECTED]>; Thu,  9 Jun 2005 09:39:01 +0200 (CEST)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: important
Date: Thu, 9 Jun 2005 09:39:07 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.SomeFool.Gen-1) IN MAIL FROM YOU

2005-01-13 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Worm.SomeFool.Gen-1
in email presumably from you (), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: 
Received: from adfc.de (p508ABF6B.dip.t-dialin.net [80.138.191.107])
by mail2.srv.syswebcom.net (Postfix) with ESMTP id DB4E82FEC27
for <[EMAIL PROTECTED]>; Thu, 13 Jan 2005 19:06:51 +0100 (CET)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Your picture
Date: Thu, 13 Jan 2005 19:07:43 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0005_622B.4C04"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail2
Received-From-MTA: smtp; mail2.srv.syswebcom.net ([127.0.0.1])
Arrival-Date: Thu, 13 Jan 2005 19:06:56 +0100 (CET)

Final-Recipient: rfc822; bettundbike@dachgeber.de
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=25733-09 - VIRUS: Worm.SomeFool.Gen-1
Last-Attempt-Date: Thu, 13 Jan 2005 19:06:56 +0100 (CET)
Received: from adfc.de (p508ABF6B.dip.t-dialin.net [80.138.191.107])
	by mail2.srv.syswebcom.net (Postfix) with ESMTP id DB4E82FEC27
	for <[EMAIL PROTECTED]>; Thu, 13 Jan 2005 19:06:51 +0100 (CET)
From: cypherpunks@minder.net
To: [EMAIL PROTECTED]
Subject: Re: Your picture
Date: Thu, 13 Jan 2005 19:07:43 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0005_622B.4C04"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.Mydoom.Gen-1) IN MAIL FROM YOU

2004-12-15 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Worm.Mydoom.Gen-1
in email presumably from you (<[EMAIL PROTECTED]>), to the following 
recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from donau.de (unknown [128.134.204.74])
by hermes.donau.de (Postfix) with ESMTP id 754DFB839F
for <[EMAIL PROTECTED]>; Thu, 16 Dec 2004 06:13:52 +0100 (CET)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: letter
Date: Thu, 16 Dec 2004 17:30:43 +0900
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016_3CF9.6D92"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; hermes.donau.de
Received-From-MTA: smtp; hermes.donau.de ([127.0.0.1])
Arrival-Date: Thu, 16 Dec 2004 06:14:02 +0100 (CET)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=17532-08 - VIRUS: Worm.Mydoom.Gen-1
Last-Attempt-Date: Thu, 16 Dec 2004 06:14:04 +0100 (CET)
Received: from donau.de (unknown [128.134.204.74])
	by hermes.donau.de (Postfix) with ESMTP id 754DFB839F
	for <[EMAIL PROTECTED]>; Thu, 16 Dec 2004 06:13:52 +0100 (CET)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: letter
Date: Thu, 16 Dec 2004 17:30:43 +0900
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016_3CF9.6D92"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


BANNED FILENAME ("document342_ana2uni.txt .pif") IN MAIL FROM YOU

2004-10-16 Thread amavisd-new
BANNED CONTENTS ALERT

Our content checker found
banned name: "document342_ana2uni.txt  
 .pif"
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

The message has been blocked because it contains a component
(as a MIME part or nested within) with declared name
or MIME type or contents type violating our access policy.

To transfer contents that may be considered risky or unwanted
by site policies, or simply too large for mailing, please consider
publishing your content on the web, and only sending an URL of the
document to the recipient.

Depending on the recipient and sender site policies, with a little
effort it might still be possible to send any contents (including
viruses) using one of the following methods:

- encrypted using pgp, gpg or other encryption methods;

- wrapped in a password-protected or scrambled container or archive
  (e.g.: zip -e, arj -g, arc g, rar -p, or other methods)

Note that if the contents is not intended to be secret, the
encryption key or password may be included in the same message
for recipient's convenience.

We are sorry for inconvenience if the contents was not malicious.

The purpose of these restrictions is to cut the most common propagation
methods used by viruses and other malware. These often exploit automatic
mechanisms and security holes in certain mail readers (Microsoft mail
readers and browsers are a common and easy target). By requiring an
explicit and decisive action from the recipient to decode mail,
the dangers of automatic malware propagation is largely reduced.


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from gollum.fri.uni-lj.si (de21663.alshamil.net.ae [217.165.48.139])
by mail.fri.uni-lj.si (Postfix) with ESMTP id B88CC7DB5
for <[EMAIL PROTECTED]>; Sat, 16 Oct 2004 22:29:41 +0200 (CEST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Stolen document
Date: Sat, 16 Oct 2004 00:25:11 +0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail.fri.uni-lj.si
Received-From-MTA: smtp; mail.fri.uni-lj.si ([127.0.0.1])
Arrival-Date: Sat, 16 Oct 2004 22:30:22 +0200 (CEST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=24170-07 - BANNED: "document342_ana2uni.txt   .pif"
Last-Attempt-Date: Sat, 16 Oct 2004 22:30:22 +0200 (CEST)
Received: from gollum.fri.uni-lj.si (de21663.alshamil.net.ae [217.165.48.139])
	by mail.fri.uni-lj.si (Postfix) with ESMTP id B88CC7DB5
	for <[EMAIL PROTECTED]>; Sat, 16 Oct 2004 22:29:41 +0200 (CEST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Stolen document
Date: Sat, 16 Oct 2004 00:25:11 +0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


BANNED FILENAME (dokument.pif) IN MAIL FROM YOU

2004-08-27 Thread amavisd-new
BANNED FILENAME ALERT

Our content checker found
banned name: dokument.pif
in your email to the following recipient:
-> [EMAIL PROTECTED]

Please check your system,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Received: from vnr.de (p508D35F0.dip.t-dialin.net [80.141.53.240])
by mail.vnr.de (Postfix) with ESMTP id 1F3D0694045
for <[EMAIL PROTECTED]>; Fri, 27 Aug 2004 10:00:59 +0200 (CEST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: dokument
Date: Fri, 27 Aug 2004 10:00:59 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0003_3DEA.4CDD"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail.vnr.de
Received-From-MTA: smtp; mail.vnr.de ([127.0.0.1])
Arrival-Date: Fri, 27 Aug 2004 10:01:03 +0200 (CEST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=24133-01 - BANNED: dokument.pif
Last-Attempt-Date: Fri, 27 Aug 2004 10:01:03 +0200 (CEST)
Received: from vnr.de (p508D35F0.dip.t-dialin.net [80.141.53.240])
	by mail.vnr.de (Postfix) with ESMTP id 1F3D0694045
	for <[EMAIL PROTECTED]>; Fri, 27 Aug 2004 10:00:59 +0200 (CEST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: dokument
Date: Fri, 27 Aug 2004 10:00:59 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0003_3DEA.4CDD"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


BANNED FILENAME (requested_document5.pif) IN MAIL FROM YOU

2004-04-07 Thread amavisd-new
BANNED FILENAME ALERT

Our content checker found
banned name: requested_document5.pif
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

The message has been blocked because it contains a component
(as a MIME part or nested within) with declared name
or MIME type or contents type violating our access policy.

With a little effort it is still possible to send ANY contents
(including viruses) using one of the following methods:

- encrypted using pgp, gpg or other encryption methods;

- wrapped in a password-protected or scrambled container or archive
  (e.g.: zip -e, arj -g, arc g, rar -p, or other methods)

Note that if the contents is not intended to be secret, the
encryption key or password may be included in the same message
for recipient's convenience.

We are sorry for inconvenience if the contents was not malicious.

The purpose of these restrictions is to cut the most common propagation
methods used by viruses and other malware. These often exploit automatic
mechanisms and security holes in certain mail readers (Microsoft mail
readers and browsers are a common and easy target). By requiring an
explicit and decisive action from the recipient to decode mail,
the dangers of automatic malware propagation is largely reduced.


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from iconz.co.nz (cpe-024-211-150-063.nc.rr.com [24.211.150.63])
by jormungand.iconz.co.nz (Postfix) with ESMTP id BA3F02B000D
for <[EMAIL PROTECTED]>; Thu,  8 Apr 2004 14:02:37 +1200 (NZST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Requested document
Date: Wed, 7 Apr 2004 22:02:40 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; jormungand
Received-From-MTA: smtp; jormungand.iconz.co.nz ([127.0.0.1])
Arrival-Date: Thu,  8 Apr 2004 14:02:42 +1200 (NZST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=32690-05 - BANNED: requested_document5.pif
Last-Attempt-Date: Thu,  8 Apr 2004 14:02:42 +1200 (NZST)
Received: from iconz.co.nz (cpe-024-211-150-063.nc.rr.com [24.211.150.63])
	by jormungand.iconz.co.nz (Postfix) with ESMTP id BA3F02B000D
	for <[EMAIL PROTECTED]>; Thu,  8 Apr 2004 14:02:37 +1200 (NZST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: Requested document
Date: Wed, 7 Apr 2004 22:02:40 -0400
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0016=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


BANNED FILENAME (jhtnaqn.pif) IN MAIL FROM YOU

2004-02-08 Thread amavisd-new
BANNED FILENAME ALERT

Our content checker found
banned name: jhtnaqn.pif
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Please check your system,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from minder.net (host81-128-109-159.in-addr.btopenworld.com [81.128.109.159])
by postfix1.intermedia.net (Postfix) with ESMTP id D224D37789
for <[EMAIL PROTECTED]>; Sun,  8 Feb 2004 10:42:34 -0800 (PST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Error
Date: Sun, 8 Feb 2004 18:35:28 +
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0003_7EF99D39.CE838972"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; postfix1.intermedia.net
Received-From-MTA: smtp; postfix1.intermedia.net ([127.0.0.1])
Arrival-Date: Sun,  8 Feb 2004 10:42:36 -0800 (PST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=26768-06 - BANNED: jhtnaqn.pif
Last-Attempt-Date: Sun,  8 Feb 2004 10:42:37 -0800 (PST)
Received: from minder.net (host81-128-109-159.in-addr.btopenworld.com [81.128.109.159])
	by postfix1.intermedia.net (Postfix) with ESMTP id D224D37789
	for <[EMAIL PROTECTED]>; Sun,  8 Feb 2004 10:42:34 -0800 (PST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Error
Date: Sun, 8 Feb 2004 18:35:28 +
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0003_7EF99D39.CE838972"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.SCO.A) IN MAIL FROM YOU

2004-02-05 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Worm.SCO.A
banned name: test.exe
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from minder.net (66-44-113-118.s372.apx3.lnhdc.md.dialup.rcn.com 
[66.44.113.118])
by mail.travelnow.com (Postfix) with ESMTP id 36505992D4
for <[EMAIL PROTECTED]>; Thu,  5 Feb 2004 10:31:16 -0600 (CST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Thu, 5 Feb 2004 11:37:02 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0001_24E8827B.35C1C70A"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail.travelnow.com
Received-From-MTA: smtp; mail.travelnow.com ([127.0.0.1])
Arrival-Date: Thu,  5 Feb 2004 10:31:29 -0600 (CST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=76387-17 - VIRUS: Worm.SCO.A
Last-Attempt-Date: Thu,  5 Feb 2004 10:31:29 -0600 (CST)
Received: from minder.net (66-44-113-118.s372.apx3.lnhdc.md.dialup.rcn.com [66.44.113.118])
	by mail.travelnow.com (Postfix) with ESMTP id 36505992D4
	for <[EMAIL PROTECTED]>; Thu,  5 Feb 2004 10:31:16 -0600 (CST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Thu, 5 Feb 2004 11:37:02 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0001_24E8827B.35C1C70A"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.SCO.A) IN YOUR MAIL

2004-02-02 Thread amavisd-new
VIRUS ALERT

Our virus checker found
virus: Worm.SCO.A
in your email to the following recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

Please check your system for viruses,
or ask your system administrator to do so.

For your reference, here are headers from your email:
- BEGIN HEADERS -
Received: from minder.net (unknown [62.117.110.164])
by mail.infobox.ru (Postfix) with ESMTP id 4C054404B24
for <[EMAIL PROTECTED]>; Mon,  2 Feb 2004 14:13:13 +0300 (MSK)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Mon, 2 Feb 2004 14:17:49 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0004_37E8DB60.DB6E40FA"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; mail.infobox.ru
Received-From-MTA: smtp; mail.infobox.ru ([127.0.0.1])
Arrival-Date: Mon,  2 Feb 2004 14:13:36 +0300 (MSK)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=16270-02 - VIRUS: Worm.SCO.A
Last-Attempt-Date: Mon,  2 Feb 2004 14:13:36 +0300 (MSK)
Received: from minder.net (unknown [62.117.110.164])
	by mail.infobox.ru (Postfix) with ESMTP id 4C054404B24
	for <[EMAIL PROTECTED]>; Mon,  2 Feb 2004 14:13:13 +0300 (MSK)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Test
Date: Mon, 2 Feb 2004 14:17:49 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0004_37E8DB60.DB6E40FA"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (W32/Mydoom.a@MM) IN MAIL FROM YOU

2004-01-31 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: W32/[EMAIL PROTECTED]
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from minder.net (AAnnecy-204-1-25-22.w81-249.abo.wanadoo.fr [81.249.174.22])
by ultra.kfki.hu (Postfix) with ESMTP id 7DB9F71208
for <[EMAIL PROTECTED]>; Sat, 31 Jan 2004 12:06:44 +0100 (MET)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: TEST
Date: Sat, 31 Jan 2004 12:06:44 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0011_D0E5EB4D.AA33C24A"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; ultra
Received-From-MTA: smtp; ultra.kfki.hu ([127.0.0.1])
Arrival-Date: Sat, 31 Jan 2004 12:06:47 +0100 (MET)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=04571-02-5 - VIRUS: W32/Mydoom.a@MM
Last-Attempt-Date: Sat, 31 Jan 2004 12:06:47 +0100 (MET)
Received: from minder.net (AAnnecy-204-1-25-22.w81-249.abo.wanadoo.fr [81.249.174.22])
	by ultra.kfki.hu (Postfix) with ESMTP id 7DB9F71208
	for <[EMAIL PROTECTED]>; Sat, 31 Jan 2004 12:06:44 +0100 (MET)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: TEST
Date: Sat, 31 Jan 2004 12:06:44 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0011_D0E5EB4D.AA33C24A"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.SCO.A) IN MAIL FROM YOU

2004-01-30 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Worm.SCO.A
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from minder.net (unknown [202.148.15.254])
by peter.petra.ac.id (Postfix) with ESMTP id EBAD355778
for <[EMAIL PROTECTED]>; Sat, 31 Jan 2004 09:32:59 +0700 (WIT)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: test
Date: Fri, 30 Jan 2004 18:49:31 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0006_3A674FB4.9CDAA549"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; peter.petra.ac.id
Received-From-MTA: smtp; peter.petra.ac.id ([127.0.0.1])
Arrival-Date: Sat, 31 Jan 2004 09:33:19 +0700 (WIT)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=30743-10 - VIRUS: Worm.SCO.A
Last-Attempt-Date: Sat, 31 Jan 2004 09:33:19 +0700 (WIT)
Received: from minder.net (unknown [202.148.15.254])
	by peter.petra.ac.id (Postfix) with ESMTP id EBAD355778
	for <[EMAIL PROTECTED]>; Sat, 31 Jan 2004 09:32:59 +0700 (WIT)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: test
Date: Fri, 30 Jan 2004 18:49:31 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0006_3A674FB4.9CDAA549"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (Worm.SCO.A) IN MAIL FROM YOU

2004-01-28 Thread amavisd-new
VIRUS ALERT

Our content checker found
virus: Worm.SCO.A
in email presumably from you (<[EMAIL PROTECTED]>), to the following recipient:
-> [EMAIL PROTECTED]

Please check your system for viruses,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Return-Path: <[EMAIL PROTECTED]>
Received: from minder.net (unknown [80.88.129.33])
by home.samurai.com (Postfix) with ESMTP id B9CB12621C
for <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 13:24:40 -0500 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Error
Date: Wed, 28 Jan 2004 19:27:46 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0006_9A423150.FC8B1900"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; home.samurai.com
Received-From-MTA: smtp; home.samurai.com ([127.0.0.1])
Arrival-Date: Wed, 28 Jan 2004 13:24:58 -0500 (EST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=14484-01-7 - VIRUS: Worm.SCO.A
Last-Attempt-Date: Wed, 28 Jan 2004 13:24:59 -0500 (EST)
Received: from minder.net (unknown [80.88.129.33])
	by home.samurai.com (Postfix) with ESMTP id B9CB12621C
	for <[EMAIL PROTECTED]>; Wed, 28 Jan 2004 13:24:40 -0500 (EST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Error
Date: Wed, 28 Jan 2004 19:27:46 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0006_9A423150.FC8B1900"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


VIRUS (W32/Mydoom@MM) IN YOUR MAIL

2004-01-27 Thread amavisd-new
VIRUS ALERT

Our virus checker found
virus: W32/[EMAIL PROTECTED]
in your email to the following recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

Please check your system for viruses,
or ask your system administrator to do so.

For your reference, here are headers from your email:
- BEGIN HEADERS -
Received: from minder.net (cs2416789-175.houston.rr.com [24.167.89.175])
by fungible5.mail.rice.edu (Postfix) with ESMTP id 7BBD119A86
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 08:23:56 -0600 (CST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Status
Date: Tue, 27 Jan 2004 08:24:03 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0006_0A0C5A94.A4216F00"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
-- END HEADERS --
Reporting-MTA: dns; fungible5.mail.rice.edu
Received-From-MTA: smtp; fungible5.mail.rice.edu ([127.0.0.1])
Arrival-Date: Tue, 27 Jan 2004 08:31:00 -0600 (CST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=11847-05 - VIRUS: W32/Mydoom@MM
Last-Attempt-Date: Tue, 27 Jan 2004 08:31:06 -0600 (CST)
Received: from minder.net (cs2416789-175.houston.rr.com [24.167.89.175])
	by fungible5.mail.rice.edu (Postfix) with ESMTP id 7BBD119A86
	for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 08:23:56 -0600 (CST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Status
Date: Tue, 27 Jan 2004 08:24:03 -0600
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0006_0A0C5A94.A4216F00"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>


BANNED FILENAME (document.pif, .exe) IN MAIL FROM YOU

2004-01-26 Thread amavisd-new
BANNED FILENAME ALERT

Our content checker found
banned names: document.pif, .exe
in your email to the following recipient:
-> [EMAIL PROTECTED]

Please check your system,
or ask your system administrator to do so.

Delivery of the email was stopped!


For your reference, here are headers from your email:
- BEGIN HEADERS -
Received: by sirian.hst.org.za (Postfix, from userid 1004)
id 7011E3197F1; Tue, 27 Jan 2004 00:29:22 +0200 (SAST)
Received: from minder.net (putc12161208254.cts.com [216.120.8.254])
by sirian.hst.org.za (Postfix) with ESMTP id 9286631992A
for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 00:28:56 +0200 (SAST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: hi
Date: Mon, 26 Jan 2004 14:28:50 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="=_NextPart_000_0008_D45DEDBB.8271A087"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on 
sirian.hst.org.za
X-Spam-Level: 
X-Spam-Status: No, hits=4.8 required=7.0 tests=BAYES_44,MICROSOFT_EXECUTABLE,
MISSING_MIMEOLE,MSGID_FROM_MTA_SHORT,NO_REAL_NAME,PRIORITY_NO_NAME 
autolearn=no version=2.61
-- END HEADERS --
Reporting-MTA: dns; sirian.hst.org.za
Received-From-MTA: smtp; sirian.hst.org.za ([127.0.0.1])
Arrival-Date: Tue, 27 Jan 2004 00:29:22 +0200 (SAST)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=93107-03 - BANNED: document.pif, .exe
Last-Attempt-Date: Tue, 27 Jan 2004 00:29:23 +0200 (SAST)
Received: by sirian.hst.org.za (Postfix, from userid 1004)
	id 7011E3197F1; Tue, 27 Jan 2004 00:29:22 +0200 (SAST)
Received: from minder.net (putc12161208254.cts.com [216.120.8.254])
	by sirian.hst.org.za (Postfix) with ESMTP id 9286631992A
	for <[EMAIL PROTECTED]>; Tue, 27 Jan 2004 00:28:56 +0200 (SAST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: hi
Date: Mon, 26 Jan 2004 14:28:50 -0800
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="=_NextPart_000_0008_D45DEDBB.8271A087"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on 
	sirian.hst.org.za
X-Spam-Level: 
X-Spam-Status: No, hits=4.8 required=7.0 tests=BAYES_44,MICROSOFT_EXECUTABLE,
	MISSING_MIMEOLE,MSGID_FROM_MTA_SHORT,NO_REAL_NAME,PRIORITY_NO_NAME 
	autolearn=no version=2.61


BANNED FILENAME (application.pif) IN YOUR MAIL

2003-08-25 Thread amavisd-new
BANNED FILENAME ALERT

Our virus checker found
banned filename: application.pif
in your email to the following recipient:
-> [EMAIL PROTECTED]

Delivery of the email was stopped!

Please check your system for viruses,
or ask your system administrator to do so.

For your reference, here are headers from your email:
- BEGIN HEADERS -
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Re: Details
Date: Mon, 25 Aug 2003 20:21:15 -
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="_NextPart_000_04FF9BC5"
-- END HEADERS --
Reporting-MTA: dns; hyrnir
Arrival-Date: Mon, 25 Aug 2003 20:17:48 + (GMT)

Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.7.1
Diagnostic-Code: smtp; 550 5.7.1 Message content rejected, id=XXKYdSmx - BANNED: application.pif
Last-Attempt-Date: Mon, 25 Aug 2003 20:17:48 + (GMT)
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Re: Details
Date: Mon, 25 Aug 2003 20:21:15 -
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="_NextPart_000_04FF9BC5"