[plug] Mail question

Richard Meyer meyerri at westnet.com.au
Thu Dec 8 21:49:26 WST 2005


Hi, I'd like a little help with weird emails I get at my account.

They are not addressed to me (at least not in the "To:" line. The
headers look as below:

> Return-path: <Admin at openaccess.com>
> Received: from in-mta04.westnet.com.au (unverified [203.10.1.134]) by
> mail-lb.westnet.com.au (Rockliffe SMTPRA 6.3.29) with ESMTP id
> <B0008370436 at mail-lb.westnet.com.au>; Thu, 8 Dec 2005 15:12:14 +0800
> Received: from longneck.westnet.com.au (in-mta04.westnet.com.au
> [127.0.0.1]) by in-mta04.westnet.com.au (Postfix) with SMTP id
> 1042DB7AA2; Thu,  8 Dec 2005 15:12:14 +0800 (WST)
> Received: from wdrbqd.com (peletp.lnk.telstra.net [165.228.4.241]) by
> longneck.westnet.com.au (Postfix) with SMTP id 63FAE256DE9; Thu,  8
> Dec 2005 15:11:51 +0800 (WST)
> From: Admin at openaccess.com
> To: rpink at westnet.com.au
> Date: Thu, 08 Dec 2005 06:46:21 GMT  (14:46 WST)
> Subject: Mail delivery failed
> Importance: Normal
> X-Mailer: SpeedMail_V8.41
> X-Priority: 3 (Normal)
> Message-ID: <cde3bd1cb.7de2dfafe at openaccess.com>
> MIME-Version: 1.0
> Content-Type: multipart/mixed; boundary="====4ffb9e646f6270306eae"
> Content-Transfer-Encoding: 7bit
> X-PMX-Version: 5.0.3.165339, Antispam-Engine: 2.1.0.0, Antispam-Data:
> 2005.12.7.43
> X-Evolution-Source: pop://meyerri@mail.westnet.com.au/

The body looks as follows:


> This is an automatically generated Delivery Status Notification.
> 
> SMTP_Error []
> I'm afraid I wasn't able to deliver your message.
> This is a permanent error; I've given up. Sorry it didn't work out.
> 
> The full mail-text and header is attached!

There is a file "mail.zip" attached, which I have looked at and I find
it contains:
>  File-packed_dataInfo.exe

This looks muy suspicioso, and a few seconds worth of ceaseless Googling
(using alltheweb.com) tells me that it is the Sober virus - is everybody
also getting this, or am I "special"?

If you aren't getting it, would you like me to send you a copy? ;-)

-- 
Richard Meyer <meyerri at westnet.com.au>
My Hovercraft is full of eels.
   --Monty Python's Flying Circus

Linux Counter user #306629




More information about the plug mailing list