Return-Path: Received: from post.thorcom.com (post.thorcom.com [195.171.43.25]) by mtain-mc04.r1000.mx.aol.com (Internet Inbound) with ESMTP id BB4BE3800009B; Tue, 29 May 2012 06:01:13 -0400 (EDT) Received: from majordom by post.thorcom.com with local (Exim 4.14) id 1SZJDJ-0001Q2-Co for rs_out_1@blacksheep.org; Tue, 29 May 2012 10:59:41 +0100 Received: from [195.171.43.32] (helo=relay1.thorcom.net) by post.thorcom.com with esmtp (Exim 4.14) id 1SZJDI-0001Pt-Ur for rsgb_lf_group@blacksheep.org; Tue, 29 May 2012 10:59:40 +0100 Received: from nm17-vm0.bullet.mail.ird.yahoo.com ([77.238.189.214]) by relay1.thorcom.net with smtp (Exim 4.77) (envelope-from ) id 1SZJDH-0000Hv-8j for rsgb_lf_group@blacksheep.org; Tue, 29 May 2012 10:59:39 +0100 Received: from [77.238.189.56] by nm17.bullet.mail.ird.yahoo.com with NNFMP; 29 May 2012 09:59:37 -0000 Received: from [212.82.108.224] by tm9.bullet.mail.ird.yahoo.com with NNFMP; 29 May 2012 09:59:37 -0000 Received: from [127.0.0.1] by omp1001.bt.mail.ird.yahoo.com with NNFMP; 29 May 2012 09:59:37 -0000 X-Yahoo-Newman-Id: 558794.57429.bm@omp1001.bt.mail.ird.yahoo.com Received: (qmail 32030 invoked from network); 29 May 2012 09:59:36 -0000 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=btinternet.com; h=DKIM-Signature:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Message-ID:From:To:References:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE:X-Antivirus:X-Antivirus-Status; b=6beNVIdpHlvwlNqtvwXMeZ/oGOZn6xMpwPdd5h44Qoi8zx1jYQxdlSVDz4uL/MfbBnp/umMfovQrsOETMWcoQYvaCCRH5GL6ZHK9+J6uqPfMy1UaHEQZ5HPXXJYCSE0ZQdOI6BqEVHszP+j3I6qU3Mk8vJO3MmbS2WbwiJX0GXQ= ; DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=btinternet.com; s=s1024; t=1338285576; bh=rHHV/dn/W+vgDWBHtxyEAuO0xOT5sfVBa/pEkSZ014w=; h=X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:Received:Message-ID:From:To:References:Subject:Date:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE:X-Antivirus:X-Antivirus-Status; b=DAxrCcTu9U4eElaG1h1ZFpgQpi/i1uxNWcIeTGSvHTywLqDKhZNE6fJAwF03bkTebsBYS/By0NZNptJsNm3n6mUrJGJTztYOMmte5ZyiVOTEvfCB2+Uh3RfxXbfsQGaja3ZftHJChQBHZkMgC065++R1XX5CYLYndAUErh093aI= X-Yahoo-Newman-Property: ymail-3 X-YMail-OSG: Tn9m4b0VM1kuh6zVPzha60vRVjJYUBHrgJXFMCpvYejBuCp t1_GU0qnU3DO_2qHpHKjQUkjz1M.wL0t0MIbWE0SG2UPSKQR1DV.pnKPi8tE 4H9mm3D6YOzANVizwGv6PUqMgwBRFAfn0Xo33Xw3h3d56.c4mUTKvU9AhaeD e9Gi9aUcc3RNm3TpsJnitdsxGfA6FgHvhAS0QYIsYhIO652LQVaga6U.xbyf oCr9sqWtp71J5WtnAj5657ZPELjCXd02ZnfgTVPbQP1FhyQKJ6_qU0Fa9jOq uBUE_qePSuwmokIC9KuIXhdwsF6TmxczrZvCFtg1Vt85cGQSVxC4jnxyGgUM ijw4K78gCKiClHiOIKz5lTFhDwr1ScKclME.z5s8Ukpjr6BwlJyWET17Z3BC .O0K4UjqqmXx_FLWM3EvOmg-- X-Yahoo-SMTP: fpz.2VeswBBs59bVshRPmMN51lcO2lgFRIvE4XTqE8dRwOxd70E- Received: from lark (alan.melia@109.155.63.143 with login) by smtp816.mail.ukl.yahoo.com with SMTP; 29 May 2012 02:59:35 -0700 PDT Message-ID: <004601cd55de$0cecab30$4001a8c0@lark> From: "Alan Melia" To: References: <1338274895.54377.YahooMailNeo@web112313.mail.gq1.yahoo.com> <01203470269C41BBB8065476B5656FFC@Extensa> Date: Fri, 29 Jun 2012 10:58:56 +0100 MIME-Version: 1.0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.2001 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.2001 X-Antivirus: avast! (VPS 120529-0, 29/05/2012), Outbound message X-Antivirus-Status: Clean X-Spam-Score: 1.4 (+) X-Spam-Report: Spam detection software, running on the system "relay1.thorcom.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Thanks Peter I have informed Tony, that I think his address book has been compromised. Muli addressing, no subject line, and a OT clickable link are all quite suspicious. Strong that it should be posted to blacksheep and not the Yaho group that tony just joined.!! [...] Content analysis details: (1.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [77.238.189.214 listed in list.dnswl.org] 1.4 DATE_IN_FUTURE_96_Q Date: is 4 days to 4 months after Received: date 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Scan-Signature: 0b2d339ae1d48966556dfb6ad64e2bce Subject: LF: Re: Re: (was blank, but take care. Seems to be virus) Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: 7bit X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on post.thorcom.com X-Spam-Level: ** X-Spam-Status: No, hits=2.4 required=5.0 tests=DATE_IN_FUTURE_96_XX autolearn=no version=2.63 X-SA-Exim-Scanned: Yes Sender: owner-rsgb_lf_group@blacksheep.org Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group X-SA-Exim-Rcpt-To: rs_out_1@blacksheep.org X-SA-Exim-Scanned: No; SAEximRunCond expanded to false x-aol-global-disposition: G X-AOL-SCOLL-SCORE: 0:2:485862240:93952408 X-AOL-SCOLL-URL_COUNT: 0 X-AOL-SCOLL-AUTHENTICATION: mail_rly_antispam_dkim-m254.2 ; domain : btinternet.com DKIM : fail x-aol-sid: 3039ac1d604c4fc49e686de0 X-AOL-IP: 195.171.43.25 X-AOL-SPF: domain : blacksheep.org SPF : temperror Thanks Peter I have informed Tony, that I think his address book has been compromised. Muli addressing, no subject line, and a OT clickable link are all quite suspicious. Strong that it should be posted to blacksheep and not the Yaho group that tony just joined.!! Alan G3NYK ----- Original Message ----- From: "PA1SDB, Peter" To: Sent: Tuesday, May 29, 2012 8:32 AM Subject: LF: Re: (was blank, but take care. Seems to be virus) > There is a virus in that link below say's my virus scanner !!! > 73's, Peter - PA1SDB >