{Spam?} {Virus?} {Spam?} is that your porn pic?

vincenzo.viscuso@fastwebnet.it vincenzo.viscuso a FASTWEBNET.IT
Mar 4 Maggio 2004 05:21:10 CEST


Ho ricevuto questa (tutti voi?).

Secondo voi, come ha fatto a passare?
ev

------------------------------------------------------------------------------

paconassau a HOTMAIL.COM wrote:

>Warning: This message has had one or more attachments removed
>Warning: (talk.htm.scr, talk.zip).
>Warning: Please read the "ITNIC-Attachment-Warning.txt" attachment(s) for more information.
>
>your photo is poor
>
>
>------------------------------------------------------------------------
>
>This is a message from the MailScanner E-Mail Virus Protection Service
>----------------------------------------------------------------------
>The original e-mail attachment "talk.zip"
>was believed to be infected by a virus and has been replaced by this warning
>message.
>
>If you wish to receive a copy of the *infected* attachment, please
>e-mail helpdesk and include the whole of this message
>in your request. Alternatively, you can call them, with
>the contents of this message to hand when you call.
>
>At Mon May  3 20:00:51 2004 the virus scanner said:
>   Sophos: >>> Virus 'W32/Netsky-C' found in file talk.htm.scr
>   MailScanner: Windows Screensavers are often used to hide viruses (talk.htm.scr)
>
>Note to Help Desk: Look on the ITNIC MailScanner in /var/spool/MailScanner/quarantine/20040503 (message i43Hxo4b016741).
>

------------------------------------------------------------------------
Completa di header:
--------------------------------------------------------------------------

>From - Tue May 04 05:09:32 2004
X-UIDL: 3153
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-Path: <owner-ita-pe a nic.it>
Received: from mail.nic.it (193.205.245.4) by ms002msg.fastwebnet.it (6.7.019)
      id 4092AEF1000B4298 for vincenzo.viscuso a FASTWEBNET.IT; Tue, 4 May 2004 00:03:33 +0200
Received: from mail.nic.it (mail.nic.it [193.205.245.4])
        by mail.nic.it (8.12.10/8.12.10) with ESMTP id i43JopHF002087;
        Mon, 3 May 2004 23:52:45 +0200 (MEST)
Received: from LISTSERV.NIC.IT by LISTSERV.NIC.IT (LISTSERV-TCP/IP release
        1.8e) with spool id 4143873 for ITA-PE a LISTSERV.NIC.IT; Mon, 3 May
        2004 23:51:14 +0200
Received: from nic.it (host128-222.pool80180.interbusiness.it [80.180.222.128])
        by mail.nic.it (8.12.10/8.12.10) with ESMTP id i43Hxo4b016741 for
        <ita-pe a nic.it>; Mon, 3 May 2004 19:59:50 +0200 (MEST)
Approved-By: paconassau a HOTMAIL.COM
Organization: Italian Registration Authority - IIT-CNR - Pisa
Message-Id: <200405031759.i43Hxo4b016741 a mail.nic.it>
From: paconassau a HOTMAIL.COM
To: ita-pe a nic.it
Subject: {Spam?} {Virus?} {Spam?} is that your porn pic?
Date: Mon, 3 May 2004 20:00:06 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
            boundary="----=_NextPart_000_0014_000009FE.000032EB"
X-Priority: 3
X-MSMail-Priority: Normal
X-ITNIC-MailScanner: Found to be infected, Found to be clean
X-ITNIC-MailScanner-SpamCheck: spam, SpamAssassin (score=10.59, required 5,
                       BAYES_90 2.10, FORGED_HOTMAIL_RCVD2 2.50,
                       MISSING_MIMEOLE 1.59, MSGID_FROM_MTA_SHORT 3.03,
                       NO_REAL_NAME 0.16, PRIORITY_NO_NAME 1.21), spam, SpamAssassin (score=5.459, required 5,
        FORGED_HOTMAIL_RCVD2 2.50, MISSING_MIMEOLE 1.59, NO_REAL_NAME 0.16,
        PRIORITY_NO_NAME 1.21)
X-ITNIC-MailScanner-SpamScore: ssssssssss, sssss
Sender: owner-ita-pe a nic.it
Precedence: list
X-ITNIC-MailScanner-Information: Please contact the ISP for more information
X-MailScanner-From: owner-ita-pe a na.nic.it

This is a multi-part message in MIME format.

------=_NextPart_000_0014_000009FE.000032EB
Content-Type: text/plain;
      charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Warning: This message has had one or more attachments removed
Warning: (talk.htm.scr, talk.zip).
Warning: Please read the "ITNIC-Attachment-Warning.txt" attachment(s) for more information.

your photo is poor

------=_NextPart_000_0014_000009FE.000032EB
Content-Type: text/plain;
  charset="us-ascii";
  name="ITNIC-Attachment-Warning.txt"
Content-Disposition: attachment; filename="ITNIC-Attachment-Warning.txt"
Content-Transfer-Encoding: quoted-printable

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "talk.zip"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Mon May  3 20:00:51 2004 the virus scanner said:
 Sophos: >>> Virus 'W32/Netsky-C' found in file talk.htm.scr
 MailScanner: Windows Screensavers are often used to hide viruses (talk.h=
tm.scr)

Note to Help Desk: Look on the ITNIC MailScanner in /var/spool/MailScanner/=
quarantine/20040503 (message i43Hxo4b016741).
--=20
Postmaster
MailScanner thanks transtec Computers for their support

------=_NextPart_000_0014_000009FE.000032EB--



Maggiori informazioni sulla lista ita-pe