Return-Path: X-Original-To: $MY_ADDR Delivered-To: $MY_ADDR Received: from $MAIL_SERVER (localhost [127.0.0.1]) by $MAIL_SERVER (Postfix) with ESMTP id 520479B194 for <$MY_ADDR>; Fri, 12 Sep 2008 14:52:18 +0900 (JST) Received: from mbox.$ISP_SERVER [XXX.XXX.XXX.XXX] by $MAIL_SERVER with POP3 (fetchmail-6.3.6) for <$MY_ADDR> (single-drop); Fri, 12 Sep 2008 14:52:18 +0900 (JST) Received: MMS00 M id OAA09035; Fri, 12 Sep 2008 14:48:15 +0900 (JST) Received: by $HOGE.$MY_ISP ($SOME_HOST) id m8C5mAqm030964; Fri, 12 Sep 2008 14:48:10 +0900 Authentication-Results: $EX.$MY_ISP smtp.mail=mcnair@kreston.com; spf=none Received: from adsl-69-215-140-70.dsl.milwwi.ameritech.net (adsl-69-215-140-70.dsl.milwwi.ameritech.net [69.215.140.70]) by $HOST.$MY_ISP (mi11) id m8C5kXkc008523 for <$MY_ACCOUNT>; Fri, 12 Sep 2008 14:46:34 +0900 Message-ID: <96268.ronald@llewellyn> Date: Fri, 12 Sep 2008 03:55:16 +0000 From: "ICS Monitoring Team" User-Agent: Thunderbird 2.0.0.12 (Windows/20080213) MIME-Version: 1.0 To: "client" <$MY_ACCOUNT> Subject: Your internet access is going to get suspended Content-Type: multipart/mixed; boundary="4434AAC8AEDA56C" X-Spam: [F=0.1000000000; CM=0.500; S=0.100(2008081101); MH=0.500(2008091136); SC=none] X-AnalysisOut: [v=1.0 c=0 a=FrSFVwW6AAAA:8 a=4p6lkhUwUsG-MDywlDEA:9 a=xj6j] X-AnalysisOut: [ezvDy1dSfl39grUA:7 a=IzZUrg5ExlOiW15K6LpYDhDG8qYA:4 a=rPt6] X-AnalysisOut: [xJ-oxjAA:10 a=kLyl8uxBjx1VO6OqEAAA:9 a=TkjEU815TG54-VvYQoU] X-AnalysisOut: [ncz-64cAA:4 a=Uw93vZ56ryQA:10 a=KvBJNyc4hB8A:10 a=jrMvPj4M] X-AnalysisOut: [KUgA:10] X-UIDL: [-7!!$]W!!%Db"!Vm1"! This is a multi-part message in MIME format. --4434AAC8AEDA56C Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit -------------------------------------------------------------------- Found virus TROJ_MEREDROP.GJ in file user-EA49943X-activities.exe (in user-EA49943X-activities.zip) The uncleanable file is deleted. -------------------------------------------------------------------- The virus contained in this E-Mail has been cleaned or deleted. You can get details from the following URL: https://www.$MY_ISP/$SOME_URL If you have questions, please contact our support center. -------------------------------------------------------------------- $ISP Support Center TEL: XX-XXXX-XXXX FAX: XX-XXXX-XXXX WWW: https://www.$MY_ISP/ E-Mail: support@$MY_ISP ------------------------------------------------------------------- Your internet access is going to get suspended The Internet Service Provider Consorcium was made to protect the rights of software authors, artists. We conduct regular wiretapping on our networks, to monitor criminal acts. We are aware of your illegal activities on the internet wich were originating from You can check the report of your activities in the past 6 month that we have attached. We strongly advise you to stop your activities regarding the illegal downloading of copyrighted material of your internet access will be suspended. Sincerely ICS Monitoring Team --4434AAC8AEDA56C Content-Type: application/zip; name="user-EA49943X-activities.zip" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="user-EA49943X-activities.zip" $SOME_ENCODE_DATA== --4434AAC8AEDA56C--