5milesbaby
20th Mar 2005, 22:48
Hi there one and all, I got another e-mail recently containing a virus that was picked up and binned well before it hit my inbox, however thought someone could play with the header I can get from it and do a little investigating please. The only reason I ask is that the message came from "[email protected]" but obviously is wasn't 10W that we party with on PPRuNe. I have mailed him and alerted him to the fact I got this mail, and he has given me full permission for me to ask this here. Hope someone can help.
Cheers, 5mb
X-YahooFilteredBulk: 81.103.54.144
Authentication-Results: mta801.mail.ukl.yahoo.com
from=hotmail.com; domainkeys=neutral (no sig)
X-Originating-IP: [81.103.54.144]
Return-Path: <[email protected]>
Received: from 81.103.54.144 (EHLO btinternet.com) (81.103.54.144)
by mta801.mail.ukl.yahoo.com with SMTP; Tue, 15 Mar 2005 20:16:19 +0000
From: [email protected]
To: <my email address removed>
Subject: Re: letter
Date: Tue, 15 Mar 2005 20:16:15 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Your document is attached to this mail.
+++ Attachment: No Virus found
+++ MessageLabs AntiVirus - www.messagelabs.com
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream;
name="letter.txt .pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="letter.txt .pif"
------=_NextPart_000_0016----=_NextPart_000_0016--
Cheers, 5mb
X-YahooFilteredBulk: 81.103.54.144
Authentication-Results: mta801.mail.ukl.yahoo.com
from=hotmail.com; domainkeys=neutral (no sig)
X-Originating-IP: [81.103.54.144]
Return-Path: <[email protected]>
Received: from 81.103.54.144 (EHLO btinternet.com) (81.103.54.144)
by mta801.mail.ukl.yahoo.com with SMTP; Tue, 15 Mar 2005 20:16:19 +0000
From: [email protected]
To: <my email address removed>
Subject: Re: letter
Date: Tue, 15 Mar 2005 20:16:15 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Your document is attached to this mail.
+++ Attachment: No Virus found
+++ MessageLabs AntiVirus - www.messagelabs.com
------=_NextPart_000_0016----=_NextPart_000_0016
Content-Type: application/octet-stream;
name="letter.txt .pif"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="letter.txt .pif"
------=_NextPart_000_0016----=_NextPart_000_0016--