Possible forged email? noreply@spamcop.net

[JosieNutter]

I only use the web-based client, so I do not know how this is possible. I'm assuming this is a virus... since it is trying to attach a .scr...

----- Forwarded message from noreply[at]spamcop.net -----

Return-Path: <noreply[at]spamcop.net>

Delivered-To: spamcop-net-josie[at]spamcop.net

Received: (qmail 22679 invoked from network); 28 Jul 2004 00:40:51 -0000

Received: from unknown (192.168.1.101)

by blade2.cesmail.net with QMQP; 28 Jul 2004 00:40:51 -0000

Received: from front3.chartermi.net (24.213.60.109)

by mailgate.cesmail.net with SMTP; 28 Jul 2004 00:40:51 -0000

X-Virus-Scanned: by cgpav

Received: from [24.236.188.191] (HELO spamcop.net)

by front3.chartermi.net (CommuniGate Pro SMTP 4.0.6)

with ESMTP id 702198185 for josie[at]spamcop.net; Tue, 27 Jul 2004 20:40:50 -0400

From: "Automatic Email Delivery Software" <noreply[at]spamcop.net>

To: josie[at]spamcop.net

Subject:

Date: Tue, 27 Jul 2004 20:39:47 -0400

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0007_077A729C.F74C6234"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-ID: <auto-000702198185[at]front3.chartermi.net>

X-spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on blade2.cesmail.net

X-spam-Level: ***

X-spam-Status: hits=3.3 tests=FORGED_MUA_OUTLOOK,MIME_BASE64_ILLEGAL

version=2.63

X-SpamCop-Checked: 192.168.1.101 24.213.60.109 24.236.188.191

This is a multi-part message in MIME format.

------=_NextPart_000_0007_077A729C.F74C6234

Content-Type: text/plain;

charset=us-ascii

Content-Transfer-Encoding: 7bit

Dear user josie[at]spamcop.net, administration of spamcop.net would like to let you know the following,

We have found that your email account has been used to send a large amount of spam messages during the recent week.

Probably, your computer was compromised and now contains a hidden proxy server.

Please follow the instructions in order to keep your computer safe.

Virtually yours,

spamcop.net user support team.

------=_NextPart_000_0007_077A729C.F74C6234

Content-Type: application/octet-stream;

name="emnwayc.scr"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="emnwayc.scr"

<snipped by Wazoo>

------=_NextPart_000_0007_077A729C.F74C6234--

----- End forwarded message -----

[StevenUnderwood]

Yes, this is part of the spew from the most recent set of viruses.

[Wazoo]

Wow, where have you been? <g> .... All the headlines yesterday, as this one impacted numerous search engines in addition to SpamCop ... please see the Topic at http://forum.spamcop.net/forums/index.php?showtopic=2201 for example.