PDA

Просмотр полной версии : Это СПАМ или что?



ScratchyClaws
16.04.2007, 13:35
Вот такое письмецо свалилось -



ОТ:System Anti-Virus Administrator <[email protected]>
КОМУ:[email protected]ХХХ.ru
ТЕМА:problem found in sent message "Договор. Бесплатная юридическая консультация"

X-AntiVirus: Checked by Dr.Web [version: 4.33, engine: 4.33.5.10110, virus records: 191321, updated: 12.04.2007]
Return-Path: <>
Received: from mx2-0.hc.ru ([89.111.176.5] verified)
by vox.smtp.ru (CommuniGate Pro SMTP 3.5.9)
with ESMTP-TLS id 494734181 for [email protected]; Mon, 16 Apr 2007 13:01:48 +0400
Received: from ns10.linky.ru ([85.118.136.66]:42210)
by mx2-0.hc.ru with esmtp (Exim 4.66 (FreeBSD))
id 1HdN5k-0003E1-7u
for [email protected]; Mon, 16 Apr 2007 13:01:44 +0400
Received: (qmail 32018 invoked by uid 512); 16 Apr 2007 09:01:43 -0000
Date: 16 Apr 2007 09:01:43 -0000
From: "System Anti-Virus Administrator" <[email protected]>
To: [email protected]
Subject: problem found in sent message "=?windows-1251?B?xO7j7uLu8C4gweXx7+vg8u3g/yD+8Ojk6Pfl8erg/yDq7u3x8+v88uD26P8=?="
Message-ID: <[email protected]>
X-Tnz-Problem-Type: 40
Auto-Submitted: auto-replied
In-Reply-To: <[email protected]>
References: <[email protected]>
MIME-Version: 1.0
Content-type: text/plain
X-Qmail-Scanner-Mail-From: [email protected] via zippy1.linky.ru
X-Qmail-Scanner: 1.25 (clamdscan: 0.88.3/1586. spamassassin: 2.63. problem Found.
Processed in 0.300633 secs)
X-SpamTest-Envelope-From:
X-SpamTest-Group-ID: 00000000
X-SpamTest-Info: Profiles 955 [Apr 16 2007]
X-SpamTest-Info: helo_type=3
X-SpamTest-Method: none
X-SpamTest-Rate: 0
X-SpamTest-Status: Not detected
X-SpamTest-Status-Extended: not_detected
X-SpamTest-Version: SMTP-Filter Version 3.0.0 [0255], KAS30/Release

Attention: [email protected]


A problem was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching its destination.

The problem was reported to be:

Disallowed breakage found in header name - potential virus


Please contact your IT support personnel with any queries regarding this
policy.


Your message was sent with the following envelope:

MAIL FROM: [email protected]
RCPT TO: [email protected], [email protected]

... and with the following headers:

---
MAILFROM: [email protected]
Received: from unknown (HELO andr-tonal.elcom.ru) ([84.53.193.14])
(envelope-sender <[email protected]>)
by ns10.linky.ru (qmail-ldap-1.03) with SMTP
for <[email protected]>; 16 Apr 2007 09:01:42 -0000
Date: Mon, 16 Apr 2007 13:01:31 +0300 (MSK)
From: =?windows-1251?B?y+Dk4A==?= <[email protected]>
X-Mailer: Microsoft Outlook Express V6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Reply-To: <[email protected]>
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: <[email protected]>
Subject: =?windows-1251?B?xO7j7uLu8C4gweXx7+vg8u3g/yD+8Ojk6Pfl8erg/yDq7u3x8+v88uD26P8=?=
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0030_01C78027.5E0F9D70"
------=_NextPart_001_0030_01C78027.5E0F9D70
X-LINKY-ANTISPAM-STATUS: (0/0)


---



The original message is kept in:

zippy1.linky.ru:/var/spool/qmailscan/quarantine/new/zippy1.linky.ru117671410349532005

where the System Anti-Virus Administrator can further diagnose it.

The Email scanner reported the following when it scanned that message:

---

---perlscanner results ---
problem 'Disallowed breakage found in header name - potential virus' found in message
---


Это такой новый вид спама?? И в чем его смысл?
Или это делается в надежде что человек полезет в их *карантин* качать себе вирус??

pig
16.04.2007, 17:20
Нет, это червяк где-то нашёл ваш адрес и воспользовался им в качестве фальшивого обратного, а сервер адресата честно ответил. Если это был червяк. Впрочем, спамерские рассылки зловредов делаются по такой же схеме.

Синауридзе Александр
16.04.2007, 17:49
Нет, это червяк где-то нашёл ваш адрес и воспользовался им в качестве фальшивого обратного, а сервер адресата честно ответил.
Вероятнее всего.;)