01.
From : darlington omann darloma1@hotmail.com
Sent : Monday, February 23, 2004 11:11 AM
To : darloma1@hotmail.com
Subject : ATTENTION!!!

X-Originating-IP: [80.179.107.99]
X-Originating-Email: [darloma1@hotmail.com]
X-Sender: darloma1@hotmail.com
Received: from 80.179.107.99 by by7fd.bay7.hotmail.msn.com with HTTP;Mon, 23 Feb 2004 11:11:52 GMT
--------------------------------------------------------------------------------
View E-mail Message Source
Content-Type: text/plain; format=flowed
Dear Sir/ Madam,

PROPOSAL
=============

My name is Dr. Darlington Omann, I work in the International operation department in a Local Bank
here in South Africa. On a routine inspection I discovered a dormant domiciliary account with a Balance
of $36,000,000 (Thirty Six Million USD) on further discreet investigation, I also discovered that the
account holder has long since passed away (dead) leaving no beneficiary to the account.
The bank will approve this money to any foreigner because the former operator of the a/c is a
foreigner and from Iraq in particular and I am certainly sure that he is dead, and nobody will come
again for the claim of this money A foreigner can only claim this money with legal claims to the
account Holder; therefore I need your cooperation in this transaction. I will provide the necessary
information needed in order to claim this money, But you will need to open an account where this can
be transferred. If interested send your private Telephone No. And Fax number including full details of
the account to be used for the Deposit I wish for utmost confidentiality in handling this transaction
as my job and the future of my family would be jeopardized if it were breached. I want to assure you that
the transaction is without risk if due process is followed accordingly.
Finally, I will give you 25% for your corporation. I look forward to a favorable response from.

Yours,
Dr. Darlington Omann.

Jag vet inte om följande är äkta s.k. "bounces" genererade av någon som fejkat min e-adress eller om det är någon som fått mejlet att se ut som en bounce direkt. Men SPAM är det definitivt !

"VIRUSSPAM":
X-Message-Info: JGTYoYF78jEWxFUhmRN8EoqfyGYFKcu7
Received: from server2k.rtlny.com ([216.182.6.3])
by mc3-f25.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824);
Sun, 13 Jun 2004 05:17:13 -0700
From: postmaster@rtlny.com
To: MOTTAGARE@hotmail.com
Date: Sun, 13 Jun 2004 07:53:14 -0400
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="9B095B5ADSN=_01C4321C2A445B5400011BD5server2k.rtlny.c"
X-DSNContext: 335a7efd - 4445 - 00000001 - 80040546
Message-ID:
Subject: Delivery Status Notification (Failure)
Return-Path: <>
X-OriginalArrivalTime: 13 Jun 2004 12:17:13.0654 (UTC) FILETIME=[5C00F560:01C45140]

This is a MIME-formatted message.
Portions of this message may be unreadable without a MIME-capable mail program.

--9B095B5ADSN=_01C4321C2A445B5400011BD5server2k.rtlny.c
Content-Type: text/plain; charset=unicode-1-1-utf-7

This is an automatically generated Delivery Status Notification.

Delivery to the following recipients failed.

cvargas@rtlny.com

--9B095B5ADSN=_01C4321C2A445B5400011BD5server2k.rtlny.c
Content-Type: message/delivery-status

Reporting-MTA: dns;server2k.rtlny.com
Received-From-MTA: dns;smtp-forward.tellurian.net
Arrival-Date: Sun, 13 Jun 2004 07:53:13 -0400

Final-Recipient: rfc822;cvargas@rtlny.com
Action: failed
Status: 5.1.1

--9B095B5ADSN=_01C4321C2A445B5400011BD5server2k.rtlny.c
Content-Type: message/rfc822

Received: from smtp-forward.tellurian.net ([216.182.1.3])
by server2k.rtlny.com with Microsoft SMTPSVC(5.0.2195.5329);
Sun, 13 Jun 2004 07:53:13 -0400
Received: from rtlny.com (pD954E5AA.dip.t-dialin.net [217.84.229.170]) by smtp-forward.tellurian.net
(Rockliffe SMTPRA 5.3.11) with ESMTP id for ;
Sun, 13 Jun 2004 07:08:27 -0400
Message-ID:
From: MOTTAGARE@hotmail.com
To: cvargas@rtlny.com
Subject: Re: hello
Date: Sun, 13 Jun 2004 13:13:09 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: mottagare@hotmail.com
X-OriginalArrivalTime: 13 Jun 2004 11:53:13.0937 (UTC) FILETIME=[01DD9410:01C4513D]

This is a multi-part message in MIME format.

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Please read the attached file!

+++ Attachment: No Virus found
+++ Kaspersky AntiVirus - www.kaspersky.com

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream;
name="document_all_cvargas.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="document_all_cvargas.zip"

X-Message-Info: 6sSXyD95QpXF3crUrtuE8cyd+N1Gr2wQ
Received: from hotmail.com ([62.79.125.200]) by mc9-f42.hotmail.com with Microsoft SMTPSVC(5.0.2195.6713);
Fri, 4 Jun 2004 12:50:36 -0700
From: feedback@candylist.com
Subject: Re: Protected Mail Request
Date: Fri, 4 Jun 2004 21:50:25 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
Return-Path: feedback@candylist.com
Message-ID:
X-OriginalArrivalTime: 04 Jun 2004 19:50:36.0608 (UTC) FILETIME=[34829400:01C44A6D]

This is a multi-part message in MIME format.

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Follow the instructions to read the message.

+++ Attachment: No Virus found
+++ Bitdefender AntiVirus - www.bitdefender.com

------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream;
name="readme_xxxxxxxxx.zip"
Content-Transfer-Encoding: base64 Content-Disposition: attachment;
filename="readme_XXXXXXXXX.zip"

Read more here;
Nigerian letters - 419 fraud
Mail Delivery Subsystem
den 21 maj 2004 12:29
correo@costa-2000.com
Warning: antivirus system report

X-Message-Info: JGTYoYF78jERbOguXHXjMF1QWBBHWFcG
Received: from correo.simarro.com ([213.229.166.149]) by mc12-f9.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824);
Fri, 21 May 2004 03:34:56 -0700
Received: from correo.simarro.com
by correo.simarro.com (Merak 7.2.0) with SMTP id JFA74547
for ; Fri, 21 May 2004 12:29:08 +0200
Date: Fri, 21 May 2004 12:29:08 +0200
From: Mail Delivery Subsystem
To: correo@costa-2000.com
Message-Id: <817193892@correo.simarro.com>
Subject: Warning: antivirus system report
Content-Type: multipart/report; report-type=virus-report;
boundary="81719389220040521122905D66E@correo.simarro.com"
Return-Path: <>
X-OriginalArrivalTime: 21 May 2004 10:34:56.0990 (UTC) FILETIME=[42C417E0:01C43F1F]
====================================================================
Warning: antivirus system report

The following message has been detected by the antivirus system
The antivirus module has responded with the following error code: 13
====================================================================

The original message was received at Fri, 21 May 2004 12:29:08 +0200
The message was sent from: ME@hotmail.com
The message was sent to: correo@costa-2000.com

MAILER-DAEMON@mailfe07.swip.net
den 21 maj 2004 09:45
Undeliverable mail: something for you

X-Message-Info: JGTYoYF78jEyGw/TtiuyQyC9m3hClOBv
Received: from mailfe07.swip.net ([212.247.154.193]) by mc2-f28.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824);
Fri, 21 May 2004 02:25:38 -0700
Subject: Undeliverable mail: something for you
From: MAILER-DAEMON@mailfe07.swip.net
Date: Fri, 21 May 2004 09:45:03 +0200
Message-ID:
X-MAPI-Message-Class: REPORT.IPM.Note.NDR
MIME-Version: 1.0
Content-Type: multipart/report; report-type="delivery-status";
boundary="_===41993566====mailfe07.swip.net===_"
Return-Path: <>
X-OriginalArrivalTime: 21 May 2004 09:25:38.0229 (UTC) FILETIME=[93F38650:01C43F15]
Failed to deliver to 'rankos@swipnet.se'
SMTP module(domain old.swip.net) reports:
host old.swip.net says:
550 Invalid recipient:
--------------------------------------------------------------------------------
Received: from [194.47.255.13] (HELO swipnet.se)
by mailfe07.swip.net (CommuniGate Pro SMTP 4.2b4a)
with SMTP id 41993519 for rankos@swipnet.se; Fri, 21 May 2004 09:44:57 +0200
From: ME@hotmail.com
To: rankos@swipnet.se
Subject: something for you
Date: Fri, 21 May 2004 09:48:48 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="45388385"
Message-ID:

SPAM MAILS:

From : TheBestNet
Sent : Friday, April 23, 2004 9:01 AM
Subject : Would you let Congress run a Hospital?

Received: from fo1.betestnet.com ([207.178.202.183]) by mc5-f39.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824); Fri, 23 Apr 2004 01:09:24 -0700
X-Message-Info: 6sSXyD95QpUuK6eLRo6UUPMv4NpXbNSU
Message-Id: <2una3m$1a389ki@botnt.com>
X-Mailer: 961026757
Return-Path: axzWgfcv@bseston.com
X-OriginalArrivalTime: 23 Apr 2004 08:09:24.0826 (UTC) FILETIME=[4A6C9BA0:01C4290A]

Subject : TrueBeginnings: Find your mate
MIME-Version: 1.0
Received: from fo1.betestnet.com ([207.178.202.183]) by mc10-f19.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824); Sun, 25 Apr 2004 10:15:54 -0700
X-Message-Info: 6sSXyD95QpXMN0kPU5mrq7dMOdSrpUgA
Message-Id: <2una3m$1abobbo@botnt.com>
X-Mailer: 961026757
Return-Path: uFfCzvgn@btehtbt.com
X-OriginalArrivalTime: 25 Apr 2004 17:15:54.0753 (UTC) FILETIME=[F791E710:01C42AE8]

MIME-Version: 1.0
Received: from ev6.tbsonstne.com ([207.178.202.176]) by mc9-f7.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824); Mon, 26 Apr 2004 01:26:36 -0700
X-Message-Info: 6sSXyD95QpVJA0iiirOsuXEWZ7dyq/1G
Message-Id: <2una3m$1ae846u@botnt.com>
X-Mailer: 961026757
Return-Path: PrVFnJsK@adrtzng.com
X-OriginalArrivalTime: 26 Apr 2004 08:26:36.0831 (UTC) FILETIME=[30C952F0:01C42B68]
control@eworm.info
den 22 maj 2004 11:01
Warning: A possible virus has been detected in one of your messages.

X-Message-Info: JGTYoYF78jFnqSoFICZ7heI8cqDwlv7C
Received: from ds46.dotserv.net ([193.201.35.61]) by mc5-f18.hotmail.com
with Microsoft SMTPSVC(5.0.2195.6824);
Sat, 22 May 2004 02:01:13 -0700
Received: (from root@localhost)
by ds46.dotserv.net (8.10.2/8.10.2) id i4M91Cg09821
for XYZ@hotmail.com; Sat, 22 May 2004 11:01:12 +0200
Date: Sat, 22 May 2004 11:01:12 +0200
Message-Id: <200405220901.i4M91Cg09821@ds46.dotserv.net>
From: control@eworm.info
Subject: Warning: A possible virus has been detected in one of your messages.
References: <200405220828.i4M8SLo05876@ds46.dotserv.net>
In-Reply-To: <200405220828.i4M8SLo05876@ds46.dotserv.net>
Return-Path: root@ds46.dotserv.net
X-OriginalArrivalTime: 22 May 2004 09:01:14.0055 (UTC) FILETIME=[55A60D70:01C43FDB]
A virus or an infected file has been detected in a message:

To: info@wafercard.nu
Subject: Re: details

Messages containing infected attachments will no longer be forwarded.

If you wish to send emails with attachment, we strongly
recommend that you enclose your attachment in formats like .ZIP.

This is the size of the email in question:
-rw------- 1 root mail 41306 May 22 10:28 msg.oyxC

This is what our filter said about the issue:
---------------------------------------------
X-Procmail-AV: (vbs|wsf|vbe|wsh|hta|scr|pif|cmd) files not allowed
---------------------------------------------

These filenames were found in the message:
"details_info.doc .scr"
Content-Disposition: attachment;

If you want this mail anyway, please click here:
mailto:info@wafercard.nu?Subject=send%20file%202004-05-22/msg.oyxC

Should that fail, click here in stead:
mailto:control@eworm.info?Subject=msg.oyxC

__________
RECIPIENT:
__________

You are our customer, therefore we did this effort to protect you from viruses.
If you do not want the antivirus scanning for your emails, please
click here: mailto:control@eworm.info?Subject=no-antivirus
otherwise no action is required on your part. A copy of this
message has been delivered to the sender.

__________
SENDER:
__________
Please update your virus detection software and clean
your system before attempting to resend this message.

If you are one of our customers, we suggest that you
use our WebMail system at:

http://YOURDOMAIN/webmail

**************************************************************

Regards,

AntiVirus System
control@eworm.info
kontrol@evirus.dk

ARKIV



Sajtkarta
Bredband / ADSL - Sanningen om Sveriges internetleverantörer !
Klicka på bannern här för att gå till huvudsidan om bredband, ADSL och internetleverantörer.