(Virus) Do not open email from phil@skayhan.net
Posted: 2004-02-28 05:33pm
contains W32.Mydoom.F@mm
The email is not actually from me. The email is originating around Tampa Bay, Florida from someone using Road Runner.
So just a heads up and maintain those virus definitions.
The email is not actually from me. The email is originating around Tampa Bay, Florida from someone using Road Runner.
I suspect Snubis (a troll on ASVS who uses RR) is infected, but how or why he has my email in his contact list is beyond me.X-Apparently-To: phil@skayhan.net via 66.218.93.154; Fri, 27 Feb 2004 19:55:25 -0800
Return-Path: <>
Received: from 65.32.5.131 (EHLO ms-smtp-01.tampabay.rr.com) (65.32.5.131)
by mta1-vm1.mail.yahoo.com with SMTP; Fri, 27 Feb 2004 19:55:25 -0800
Received: from localhost (localhost)
by ms-smtp-01.tampabay.rr.com (8.12.10/8.12.7) id i1S3tPDJ013599;
Fri, 27 Feb 2004 22:55:25 -0500 (EST)
Date: Fri, 27 Feb 2004 22:55:25 -0500 (EST)
From: Mail Delivery Subsystem <MAILER-DAEMON@ms-smtp-01.tampabay.rr.com>
Message-Id: <200402280355.i1S3tPDJ013599@ms-smtp-01.tampabay.rr.com>
To: <phil@skayhan.net>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="i1S3tPDJ013599.1077940525/ms-smtp-01.tampabay.rr.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
This is a MIME-encapsulated message
--i1S3tPDJ013599.1077940525/ms-smtp-01.tampabay.rr.com
The original message was received at Fri, 27 Feb 2004 22:55:22 -0500 (EST)
from 653411hfc64.tampabay.rr.com [65.34.11.64]
----- The following addresses had permanent fatal errors -----
<jimdavis2002@earthlink.net>
(reason: 550 jimdavis2002@earthlink.net...User unknown)
----- Transcript of session follows -----
... while talking to mxb.earthlink.net.:
>>> RCPT To:<jimdavis2002@earthlink.net>
<<< 550 jimdavis2002@earthlink.net...User unknown
550 5.1.1 <jimdavis2002@earthlink.net>... User unknown
--i1S3tPDJ013599.1077940525/ms-smtp-01.tampabay.rr.com
Content-Type: message/delivery-status
Reporting-MTA: dns; ms-smtp-01.tampabay.rr.com
Received-From-MTA: DNS; 653411hfc64.tampabay.rr.com
Arrival-Date: Fri, 27 Feb 2004 22:55:22 -0500 (EST)
Final-Recipient: RFC822; jimdavis2002@earthlink.net
Action: failed
Status: 5.1.1
Remote-MTA: DNS; mxb.earthlink.net
Diagnostic-Code: SMTP; 550 jimdavis2002@earthlink.net...User unknown
Last-Attempt-Date: Fri, 27 Feb 2004 22:55:25 -0500 (EST)
--i1S3tPDJ013599.1077940525/ms-smtp-01.tampabay.rr.com
Content-Type: text/rfc822-headers
Received: from skayhan.net (653411hfc64.tampabay.rr.com [65.34.11.64])
by ms-smtp-01.tampabay.rr.com (8.12.10/8.12.7) with ESMTP id i1S3tMDJ013578
for <jimdavis2002@earthlink.net>; Fri, 27 Feb 2004 22:55:22 -0500 (EST)
Message-Id: <200402280355.i1S3tMDJ013578@ms-smtp-01.tampabay.rr.com>
From: phil@skayhan.net
To: jimdavis2002@earthlink.net
Subject: Your account has expired
Date: Fri, 27 Feb 2004 22:54:37 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_22C2EC1D.C1E0C90C"
X-Priority: 3
X-MSMail-Priority: Normal
X-Virus-Scanned: Symantec AntiVirus Scan Engine
X-Virus-Scan-Result: Repaired 35926 W32.Mydoom.F@mm
--i1S3tPDJ013599.1077940525/ms-smtp-01.tampabay.rr.com--
So just a heads up and maintain those virus definitions.