Hello All,
I got the following notice from Everyones Internet (ev1.net)[I listed the headers also]. Now I know that the mydoom virus spoofs the sender email address. But why would I get a notice from them about an email that is being sent to one of my customers at PepperLink.net. Little confused here.
Bennie
=============================================
Received: from smtpout.ev1.net [207.44.129.134] by mail.pepperlink.net with ESMTP
(SMTPD32-8.13) id ABDEC7B002A; Mon, 04 Oct 2004 14:52:14 -0400
Date: Mon, 4 Oct 2004 14:02:15 -0500
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: "Postmaster" <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: WARNING: YOU MAY HAVE A VIRUS
X-Mailer: <IMail v6.05>
X-RBL-Warning: SENDERDB-WHT: "Allowed - See http://www.senderdb.com/lookup/lookupResults.asp?ipAddress=207.44.129.134 for more information"
X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.
X-Declude-Sender: [EMAIL PROTECTED] [207.44.129.134]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: SENDERDB-WHT [0]
X-Note: QueInControl: D9bde0c7b002adaef.SMD (1)
X-Spam-Tests-Failed: SENDERDB-WHT [0]
X-Note: RDNS Real Origin: smtpout.ev1.net[207.44.129.134]
X-Note: SMTP Real From: [EMAIL PROTECTED]
X-Note: SMTP Real To: [EMAIL PROTECTED]
X-Note: This E-mail was sent from smtpout.ev1.net ([207.44.129.134]).
X-RBL-Warning: Total spam weight of this E-mail is 0.
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 378529047
The virus software on smtpout.ev1.net has reported that you sent a virus with the subject "hi" to: [EMAIL PROTECTED] The E-mail containing the virus has been removed to prevent further damage.
: W32/[EMAIL PROTECTED] was found in file: readme.scr --- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
