[11904] in Zephyr_Bugs
Mail delivery failed: returning message to sender
daemon@ATHENA.MIT.EDU (Mail Delivery System)
Mon Dec 13 10:52:23 2004
From: Mail Delivery System <Mailer-Daemon@echo.hmdnsgroup.com>
To: zephyr-bugs@mit.edu
Message-Id: <E1CdsUc-0000Ai-5h@echo.hmdnsgroup.com>
Date: Mon, 13 Dec 2004 10:52:10 -0500
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
blackhole@echo.hmdnsgroup.com
(generated from pcollins@themortgagebutton.com)
Unrouteable address
------ This is a copy of the message, including all the headers. ------
Return-path: <zephyr-bugs@mit.edu>
Received: from host114.155.212.231.conversent.net ([155.212.231.114] helo=themortgagebutton.com)
by echo.hmdnsgroup.com with esmtp (Exim 4.43)
id 1CdsUQ-00009Q-3T
for pcollins@themortgagebutton.com; Mon, 13 Dec 2004 10:52:00 -0500
From: zephyr-bugs@mit.edu
To: pcollins@themortgagebutton.com
Subject: Shocking document
Date: Mon, 13 Dec 2004 10:58:59 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
X-HMDNSGroup-MailScanner-Information: Please contact the ISP for more information
X-HMDNSGroup-MailScanner: Found to be infected
X-MailScanner-From: zephyr-bugs@mit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
I am shocked about your document!
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="ISO-8859-1";
name="HMDNSGroup-Attachment-Warning.txt"
Content-Disposition: inline; filename="HMDNSGroup-Attachment-Warning.txt"
Content-Transfer-Encoding: quoted-printable
This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "your_document.zip"
was believed to be dangerous and/or infected by a virus and has been
replaced by this warning message.
Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the infected attachment. Please
ask the sender of the message to disinfect their original version and send
you a clean copy.
At Mon Dec 13 10:52:02 2004 the scanner said:
ClamAV: document.txt .exe contains Worm.SomeFool.P=20
--=20
Postmaster
MailScanner thanks transtec Computers for their support
------=_NextPart_000_0016----=_NextPart_000_0016--