I've seen a few of these... its a new virus I guess. It's not 'from' them
at all...
Paul Farber
Farber Technology
[EMAIL PROTECTED]
Ph 570-628-5303
Fax 570-628-5545
On Mon, 4 Dec 2000, Ari Arantes Filho wrote:
> Hi,
>
> I'm receiving a virus from [EMAIL PROTECTED], I've already inserted this
> email in badmailfrom, the qmail was restarted and I'm still receiving this
> virus.
>
> In the header below you can see that the user doesn't exist, there is a
> 3D caracter in the beginning of the email address, so the address is
> unknowm, but even inserted in badmailfrom I've receive order mails from this
> guy.
>
> Here goes the header:
>
> Return-Path: <>
> Received: (qmail 14547 invoked by uid 0); 4 Dec 2000 21:26:48 -0000
> Received: from unknown (HELO mail01.osite.com.br) (200.189.209.130)
> by mail.doctordata.com.br with SMTP; 4 Dec 2000 21:26:48 -0000
> Received: from clipping (a09029.dial-pn.impsat.com.br [200.189.200.29])
> by mail01.osite.com.br (8.9.1b+Sun/8.9.3) with SMTP id SAA14499
> for <[EMAIL PROTECTED]>; Mon, 4 Dec 2000 18:49:02 -0200 (EDT)
> Date: Mon, 4 Dec 2000 18:49:02 -0200 (EDT)
> Message-Id: <[EMAIL PROTECTED]>
> From: Hahaha <[EMAIL PROTECTED]>
> Subject: Branca de Neve pornô!
> MIME-Version: 1.0
>
>
>
