[IAN] Virus infected mail rejected

Antivirus System antivirus na muni...
Pondělí Červenec 15 17:33:52 CEST 2002


    **********************************************
    **      THIS IS A WARNING MESSAGE ONLY      **
    **  YOU DO NOT NEED TO RESEND YOUR MESSAGE  **
    **********************************************

The original message was received at Mon, 15 Jul 2002 17:33:51 +0200
from IDENT:root na ns....cz [193.85.16.194]

   ----- Transcript of session follows -----

!!! POZOR !!! POSTOVNI SERVER MU NALEZL VE VASI POSTE VIRUS.
!!! POZOR !!! V PRILOZE MATE HLAVICKU MAILU PRO PRIPADNY 
!!! POZOR !!! KONTAKT NA ODESILATELE


ANTIVIRUS SYSTEM FOUND VIRUSES

From:    Michaela.vodickova na benzinatrade...
To:      Ian na amper....muni.cz
Subject: Re: Your password!

dfg6FFXp9Q025641    archive: Mail
dfg6FFXp9Q025641/html    suspicion: Exploit.IFrame.FileDownload
dfg6FFXp9Q025641/decrypt-password.exe    packed: PE-Pack
dfg6FFXp9Q025641/decrypt-password.exe    packed: UPX
dfg6FFXp9Q025641/decrypt-password.exe    infected: I-Worm.Frethem.l
dfg6FFXp9Q025641/password.txt    ok.

This message contain viruses. Virus was detected
with Antiviral Toolkit Pro from http://www.avp.ru.


   ----- Message header follows -----

Return-Path: <Michaela.vodickova na benzinatrade...>
Received: from ns.unipetrol.cz (IDENT:root na ns....cz [193.85.16.194]) 
	by anor.ics.muni.cz (8.12.1/8.12.1) with ESMTP id g6FFXp9Q025641 
	for <Ian na amper....muni.cz>; Mon, 15 Jul 2002 17:33:51 +0200
Received: from ug-ns.unipetrol.cz (ug-ns.unipetrol.cz [172.30.1.10])
	by ns.unipetrol.cz (8.9.3/8.9.3) with ESMTP id QAA22225
	for <Ian na amper....muni.cz>; Mon, 15 Jul 2002 16:33:50 +0200
From: Michaela.vodickova na benzinatrade...
Received: from benzinatrade.cz (bt-ms.benzinatrade.cz [172.19.240.65])
	by ug-ns.unipetrol.cz (8.9.3/8.9.3) with ESMTP id QAA19237
	for <Ian na amper....muni.cz>; Mon, 15 Jul 2002 16:30:58 +0200
Date: Mon, 15 Jul 2002 16:30:58 +0200
Received: from BTRADE/SpoolDir by benzinatrade.cz (Mercury 1.40);
    15 Jul 102 17:39:44 UTC +0100
Received: from SpoolDir by BTRADE (Mercury 1.40); 15 Jul 102 15:01:47 UTC +0100
Received: from AFRICA (172.19.240.76) by benzinatrade.cz (Mercury 1.40);
    15 Jul 102 15:01:45 UTC +0100
To: Ian na amper....muni.cz
Subject: Re: Your password!
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary=L1db82sd319dm2ns0f4383dhG
Message-ID: <B0EC4F123B3 na benzinatrade...>
X-Muni-Spam-TestIP: 193.85.16.194
X-Muni-Envelope-From: Michaela.vodickova na benzinatrade...
X-Muni-Virus-Test: Found

   ----- Message body suppressed -----





More information about the Ian mailing list