Hello Listbuds,
Sorry to ask this on the list but everyone here knows so much
and I'm perplexed by this problem...
An associate keeps getting emails that look like this:
------------------------ sample email-------------------
This message was created automatically by mail delivery software (Exim).
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
[EMAIL PROTECTED]
This message has been rejected because it has
an apparently executable attachment demo.exe
This is a virus prevention measure.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
------ The body of the message is 132983 characters long; only the first
------ 65536 or so are included here.
Return-path: <[EMAIL PROTECTED]>
Received: from modem-2978.tiger.dialup.pol.co.uk ([62.136.219.162] helo=Pnypbcpqi)
by tmailb1.svr.pol.co.uk with smtp (Exim 3.35 #1)
id 17TmgP-00002O-00
for [EMAIL PROTECTED]; Sun, 14 Jul 2002 17:57:17 +0100
From: anne-marietv <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: A very funny game
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=Z17mu856964L56
Message-Id: <[EMAIL PROTECTED]>
Date: Sun, 14 Jul 2002 17:57:17 +0100
--Z17mu856964L56
Content-Type: text/html; Content-Transfer-Encoding: quoted-printable
<HTML><HEAD></HEAD><BODY>
<FONT>This is a special funny game<br>
This game is my first work.<br>
You're the first player.<br>
I hope you would like it.</FONT></BODY></HTML>
-------END OF SAMPLE 1
--- SAMPLE 2 -----
[EMAIL PROTECTED]
This message has been rejected because it has
an apparently executable attachment Privacy.scr
This is a virus prevention measure.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
------ The body of the message is 120228 characters long; only the first
------ 65536 or so are included here.
Return-path: <[EMAIL PROTECTED]>
Received: from [195.92.168.141] (helo=tmailb1.svr.pol.co.uk)
by mail7.svr.pol.co.uk with esmtp (Exim 3.35 #1)
id 17Rdqb-0004fS-00
for [EMAIL PROTECTED]; Mon, 08 Jul 2002 20:06:57 +0100
Received: from modem-3206.zebra.dialup.pol.co.uk ([81.76.156.134] helo=Thmggcfu)
by tmailb1.svr.pol.co.uk with smtp (Exim 3.35 #1)
id 17Rdq9-0001Tp-00
for [EMAIL PROTECTED]; Mon, 08 Jul 2002 20:06:29 +0100
From: webmaster <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: The Garden of Eden
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary=B7029mwed2734h1r1A734NW6J1054aTxfQ2E
Message-Id: <[EMAIL PROTECTED]>
Date: Mon, 08 Jul 2002 20:06:29 +0100
--------END OF SAMPLE 2
The return path is always [EMAIL PROTECTED], the messages (there's
been probably 30 this past week) are being returned from
different email servers who don't accept attachments. Sample 1
seems to tell me someone else sent it and it really was from
someone named Anne.. Sample 2 however, does not show
any other potential email, it looks to me like it came from his
system, but still, I've scanned it, am running 2 different virus
software all up-to-date-- and I can't seem to figure out how this
is happening.
Is it possible a virus has his email and is just
randomly saying it came from his email? Has anyone seen this
before?
Many many thanks... in advance.
Laura
--
Best regards,
Laura mailto:[EMAIL PROTECTED]
________________________________________________________
Current Ver: 1.61
FAQ : http://faq.thebat.dutaint.com
Unsubscribe: mailto:[EMAIL PROTECTED]
Archives : http://tbudl.thebat.dutaint.com
Moderators : mailto:[EMAIL PROTECTED]
TBTech List: mailto:[EMAIL PROTECTED]
Bug Reports: https://www.ritlabs.com/bt/
