Return-Path: Received: from post.thorcom.com (post.thorcom.com [195.171.43.25]) by mtain-mk05.r1000.mx.aol.com (Internet Inbound) with ESMTP id D5E6E3800008E; Fri, 15 Mar 2013 11:14:56 -0400 (EDT) Received: from majordom by post.thorcom.com with local (Exim 4.14) id 1UGVk1-0007ks-Eh for rs_out_1@blacksheep.org; Fri, 15 Mar 2013 14:36:17 +0000 Received: from [195.171.43.32] (helo=relay1.thorcom.net) by post.thorcom.com with esmtp (Exim 4.14) id 1UGVk1-0007kj-1i for rsgb_lf_group@blacksheep.org; Fri, 15 Mar 2013 14:36:17 +0000 Received: from mail-ob0-f181.google.com ([209.85.214.181]) by relay1.thorcom.net with esmtps (TLSv1:RC4-SHA:128) (Exim 4.77) (envelope-from ) id 1UGVjz-0006fI-BE for rsgb_lf_group@blacksheep.org; Fri, 15 Mar 2013 14:36:15 +0000 Received: by mail-ob0-f181.google.com with SMTP id ni5so3211088obc.40 for ; Fri, 15 Mar 2013 07:35:53 -0700 (PDT) X-DKIM-Result: Domain=gmail.com Result=Good and Known Domain DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:date:message-id:subject:from:to :content-type; bh=2nShzDjBcQMfHOTJf0WdKG/UoX7WKdzrRkP3RpT+ltg=; b=YUBOjLhi2nIsIeACgUvHETMMAP3oJ5IjropyYhNmeiIcWf58JEvggQO49OfIcsF+0i J2s0svpCvxrzk+WPuUBTT58NGZc49wMwm3HMdVZgxdmwR0rneRWcMUy2yFotND31DzUs 79pfxyHvMypHB9cppjJivmkwMbPScDlBC2QU/NXIM8NEqvCNncoW5TicePEsdX/UVk9X JYyYYdghDYy8eFUpZB+hyxcuh06ScfblF1YVejHKBESEETp/PXGsTIUXXgBjEv8AFS9u /wqJjtNdLD2K+xE+0a6cornH8RhHPR1EKddul+6ID4CXaTLPTVMsgUuLiHy34nxbgjQI Bk8A== MIME-Version: 1.0 X-Received: by 10.60.2.164 with SMTP id 4mr2944956oev.85.1363358153431; Fri, 15 Mar 2013 07:35:53 -0700 (PDT) Received: by 10.60.165.39 with HTTP; Fri, 15 Mar 2013 07:35:53 -0700 (PDT) Date: Fri, 15 Mar 2013 10:35:53 -0400 Message-ID: From: Warren Ziegler To: rsgb_lf_group X-Spam-Score: -0.7 (/) X-Spam-Report: Spam detection software, running on the system "relay1.thorcom.net", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: It seems that a virus has taken over Lech's e-mail, since yesterday I have been receiving spam from LECH LASZKIEWICZ Please update virus programs and scan your machine! Thank you [...] Content analysis details: (-0.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wd2xgj[at]gmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid X-Scan-Signature: 33d261536bb1467bb13d5764461d5ec4 Subject: LF: Only Slightly O.T. - Lech your computer is infected Content-Type: multipart/alternative; boundary=e89a8f923da26feacc04d7f78e38 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on post.thorcom.com X-Spam-Level: X-Spam-Status: No, hits=0.3 required=5.0 tests=HTML_50_60,HTML_MESSAGE, HTML_TAG_EXISTS_TBODY autolearn=no version=2.63 X-SA-Exim-Scanned: Yes Sender: owner-rsgb_lf_group@blacksheep.org Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group X-SA-Exim-Rcpt-To: rs_out_1@blacksheep.org X-SA-Exim-Scanned: No; SAEximRunCond expanded to false x-aol-global-disposition: G X-AOL-SCOLL-AUTHENTICATION: mtain-mk05.r1000.mx.aol.com ; domain : gmail.com DKIM : fail x-aol-sid: 3039ac1d618951433af008dc X-AOL-IP: 195.171.43.25 X-AOL-SPF: domain : blacksheep.org SPF : none --e89a8f923da26feacc04d7f78e38 Content-Type: text/plain; charset=ISO-8859-1 It seems that a virus has taken over Lech's e-mail, since yesterday I have been receiving spam from LECH LASZKIEWICZ Please update virus programs and scan your machine! Thank you -- 73 Warren K2ORS WD2XGJ WD2XSH/23 WE2XEB/2 WE2XGR/1 --e89a8f923da26feacc04d7f78e38 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable
It seems that a virus has taken over Lech's e-mail, si= nce yesterday I have been receiving spam from=A0
LECH LASZKIEWICZ=A0<lechlaski@btinternet.com>

Please update virus programs and scan your machine!

Thank you

--
73 Warren K2ORS
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 WD2XG= J
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 WD2XSH/23
=A0 =A0 =A0 =A0 =A0 =A0 = =A0 =A0 WE2XEB/2
=A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0 WE2XGR/1

=A0 --e89a8f923da26feacc04d7f78e38--