[53497] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Returned mail: see transcript for details

daemon@ATHENA.MIT.EDU (Mail Delivery Subsystem)
Tue Oct 17 11:41:58 2006

Date: Tue, 17 Oct 2006 17:41:19 +0200 (MEST)
From: Mail Delivery Subsystem <MAILER-DAEMON@relay2.rwth-aachen.de>
To: crypto.discuss@bloom-picayune.mit.edu
Cc:

This is a MIME-encapsulated message

--Boundary_(ID_7vS1Ab2HvWMHrFlVaGkiCg)
Content-type: TEXT/PLAIN
Content-transfer-encoding: 7BIT

The original message was received at Tue, 17 Oct 2006 17:41:13 +0200 (MEST)
from mail.supercabletv.net.co [200.106.160.3]

   ----- The following addresses had permanent fatal errors -----
<theory@informatik.rwth-aachen.de>
    (reason: 550 5.1.1 unknown or illegal alias: theory@informatik.rwth-aachen.de)

   ----- Transcript of session follows -----
... while talking to relay3.rwth-aachen.de.:
>>> RCPT To:<theory@informatik.rwth-aachen.de>
<<< 550 5.1.1 unknown or illegal alias: theory@informatik.rwth-aachen.de
550 5.1.1 <theory@informatik.rwth-aachen.de>... User unknown

--Boundary_(ID_7vS1Ab2HvWMHrFlVaGkiCg)
Content-type: message/delivery-status

Reporting-MTA: dns; relay2.rwth-aachen.de
Received-From-MTA: DNS; mail.supercabletv.net.co
Arrival-Date: Tue, 17 Oct 2006 17:41:13 +0200 (MEST)

Final-Recipient: RFC822; theory@informatik.rwth-aachen.de
Action: failed
Status: 5.1.1
Remote-MTA: DNS; relay3.rwth-aachen.de
Diagnostic-Code: SMTP; 550 5.1.1 unknown or illegal alias: theory@informatik.rwth-aachen.de
Last-Attempt-Date: Tue, 17 Oct 2006 17:41:19 +0200 (MEST)

--Boundary_(ID_7vS1Ab2HvWMHrFlVaGkiCg)
Content-type: message/rfc822
Content-transfer-encoding: 8BIT

Return-path: <crypto.discuss@bloom-picayune.mit.edu>
Received: from supercabletv.net.co (mail.supercabletv.net.co [200.106.160.3])
	by relay2.rwth-aachen.de (8.13.7/8.13.0/1) with ESMTP id k9HFfCK7008428	for
 <theory@informatik.rwth-aachen.de>; Tue, 17 Oct 2006 17:41:13 +0200 (MEST)
Received: from bloom-picayune.mit.edu (unverified [200.106.168.195])
	by supercabletv.net.co (SurgeMail 3.7b8) with ESMTP id 21550631	for
 <theory@informatik.rwth-aachen.de>; Tue, 17 Oct 2006 10:03:14 -0500
Date: Sat, 14 Oct 2006 05:33:01 -0500
From: crypto.discuss@bloom-picayune.mit.edu
Subject: *****SPAM***** Delivery reports about your e-mail
To: theory@informatik.rwth-aachen.de
Message-id: <1161097395_5377@mail.supercabletv.net.co>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-type: multipart/mixed; boundary="Boundary_(ID_M66eCkyRI95pVwjkV7ldng)"
X-Priority: 3
X-MSMail-priority: Normal
X-Server: High Performance Mail Server - http://surgemail.com r=444817480
X-Spam-Prev-Subject: Delivery reports about your e-mail
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on
	nova.rz.RWTH-Aachen.DE
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.2 required=5.5 tests=BAYES_60,FORGED_MUA_OUTLOOK,
	NO_REAL_NAME,RCVD_IN_SORBS_DUL,SPF_HELO_SOFTFAIL,UPPERCASE_25_50	autolearn=no
 version=3.0.4
X-Spam-Report: *  0.0 NO_REAL_NAME From: does not include a real name	*  3.1
 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail)	*      [SPF
 failed: Please see
 http://spf.pobox.com/why.html?sender=mit.edu&ip=200.106.168.195&receiver=nova.rz.RWTH-Aachen.DE]	*
  1.0 BAYES_60 BODY: Bayesian spam probability is 60 to 80%	*      [score:
 0.7512]	*  0.1 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP
 address	*      [200.106.168.195 listed in dnsbl.sorbs.net]	*  0.0
 UPPERCASE_25_50 message body is 25-50% uppercase	*  3.9 FORGED_MUA_OUTLOOK
 Forged mail pretending to be from MS Outlook

This is a multi-part message in MIME format.

--Boundary_(ID_M66eCkyRI95pVwjkV7ldng)
Content-type: text/plain; charset=us-ascii
Content-transfer-encoding: 8BIT

-u9A)H0t]
w!$Qw&wu&jq|!
ҫkg1r"sį1gJzČ,W_Y>ll
b~o2\bk2(xi͆9RfџDjEˮ~Ӵ?
z-gx}61-7r
Ib
̡B^AŠ9o6˟t棻GژtAފ9]gfCd;RQ,o
"fK5wzc^Œ`Łp,jv4'QN/ζ gjgY\,JEP0m0:TANgZǂOyy}s{>!a|/;FoFumM&Y0>FlxҬ{9h Ke0'H(]y4g2)vR󳎒C\9`ܞ0?~)#9Y1C!BR`}͟u-$>7L4L%Fz܄hJd
H^'ܚŠqA

`˪&CLZ^,V<ȔRW0Ks6ÃR)x
"sOޠ?-4f/Ȩ\_'a;*'Uv٥d'**Y͔aUxmڛgfsP1O}֜&)#BV(1u㖻X!N~h6P¯$
)AlXr1
FCBKu`i7JBcY\Tj'Yc
IF'lh|
,<Dgq(jx'Gܜo.Y~]]n{ޥ׈mv`ql>^^[j1C7
Gė4`9
-^*mϼbHwmjh
0*
ٌTRԬZm :צ>G;\6~0ݦv
hMS
-qʷO]'8"6e;>ll 
Ń
R^{s?pG-o8D䦪3/C~~&L#mڏv;
9g;þpOc#e\ԁ1Ee
~G<GϟyP .2vo)բfµ)C|g
LJ_|dRÇ֠I0m{AW!mQSiMtihpm3TO{[ω4yb4I``Msqb8oܚJyă}c{o~qc<TWLL7d2zvDeyǭ;{hlf~ёRGP捻-k̆e$,i9L0Iվi{\^82`Gn<[8,FVMYTtO\["X
jϷ1I:ƛf?fô }'J_|>-^ҤnQ
"{`{ IV}Ȉ2g|(]Ro"jЕ:Nb^aCytT<BSh4Si~V1{3(Tm&OEނǾ{/ehb4|*
}]OX~ɯwrU
tڸHm*PkkKcX֊9&5fjNߨ7jR%ZpT/gN
ɇ͆5e,mB;'9qSb毛
hT8ݜhZ.HD20ʺl&p<1m7`,GZnf#G
cpqBb栻WծN
J447r}1n{C[Kc-jnC*q#ڿؚP&mSApG-ebdEWW?wMm`_RPY0V`8))2guft
lGJ(b$١#s764lDZ桖ZH>(UTJϡ2ee9B]-stkxIZkHA
*8$$&wv2o^l`zjJ~Qh|2A?C* NdW6Ct<
48]l'i#dLL
`O
lM<^:)ފ,Hi闏gg` ۮ`.veϑ`eQAougԅӔL"mq4Sl<Dq~$r叭ԫ˽](Qɺ^iEُl(]38#ߑ nCUƻ6yǿn[P'OTf
Aƪ7) xv
PLO#]D
]7 s];2J^xU8|xDVUTNH<1!*J/h`"{yzv:RM$*F_Oe$`'0ң_^TosaRsFL֮3q7(CluB)`
kbO[eF4E-MI{daipDް-/5pmVd)S_4XWz`d5
?gL Q_<#Z
,װ2exYp2[sڞway02O1
i}C${މt
r|XI


--Boundary_(ID_M66eCkyRI95pVwjkV7ldng)
Content-type: Text/Plain; name=MailMonitor_report.txt
Content-transfer-encoding: 7BIT
Content-disposition: attachment; filename=MailMonitor_report.txt

Client: MailMonitor for SMTP v1.2.2 

The message body part has been replaced with this note.

Problem description:
Attachment validity check: passed.
Virus identity found: W32/MyDoom-O
Virus identity found: W32/MyDoom-O


See also:
http://www.rz.rwth-aachen.de/infodienste/email/virus.php


--Boundary_(ID_M66eCkyRI95pVwjkV7ldng)--

--Boundary_(ID_7vS1Ab2HvWMHrFlVaGkiCg)--
home help back first fref pref prev next nref lref last post