[9fans] Returned mail: see transcript for details

[9fans] Returned mail: see transcript for details

[Mail Administrator]

[-- Attachment #1: Type: text/plain, Size: 362 bytes --]

The original message was received at Mon, 26 Jul 2004 11:01:21 -0400
from 86.219.237.116

----- The following addresses had permanent fatal errors -----
<9fans@cse.psu.edu>

----- Transcript of the session follows -----
... while talking to cse.psu.edu.:
554 <9fans@cse.psu.edu>... Message is too large
554 <9fans@cse.psu.edu>... Service unavailable


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="file.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="file.zip"

[-- Attachment #2.2: file.zip.suspect --]
[-- Type: application/octet-stream, Size: 29240 bytes --]

[9fans] Returned mail: see transcript for details

[Returned mail]

[-- Attachment #1: Type: text/plain, Size: 399 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file file.exe (in file.zip)
The file file.zip is moved to /var/quarantine/virus/virXKLyZqrlZ.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 412 bytes --]

Dear user of cse.psu.edu, administration of cse.psu.edu would like to inform you

Your e-mail account was used to send a large amount of unsolicited commercial email messages during the recent week.
Most likely your computer was infected and now runs a trojan proxy server.

Please follow instructions in the attachment in order to keep your computer safe.

Have a nice day,
cse.psu.edu support team.


[-- Attachment #3: Type: text/plain, Size: 183 bytes --]


------------------  Virus Warning Message (on the network)

file.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 399 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file file.bat (in file.zip)
The file file.zip is moved to /var/quarantine/virus/virDBGVnLaMT.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: Type: text/plain; charset=us-ascii, Size: 351 bytes --]

�����b�)��f�<�t~�j�fX2�ԭ����ލ0䘮�U��O��5<�|�ɟֆ%’1��.sB�ߓ�Ϭ�FR�̾BTk�vT��*�Qo}�v����n�{#M\`��F�#���<8Ǣ6�D�x�!�|�����_��������^��w~7Q5XY��
��_�*n��֮�7��u?�
�
�
�h
�8aKï�



[-- Attachment #3: Type: text/plain, Size: 183 bytes --]


------------------  Virus Warning Message (on the network)

file.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[The Post Office]

[-- Attachment #1: Type: text/plain, Size: 482 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file gtjjt.htm                                                                            .scr (in gtjjt.zip)
The file gtjjt.zip is moved to /var/quarantine/virus/virCUKSOHHdV.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 334 bytes --]

The original message was received at Mon, 26 Jul 2004 13:52:01 -0400 from cse.psu.edu [145.238.151.53]

----- The following addresses had permanent fatal errors -----
<9fans@cse.psu.edu>

----- Transcript of session follows -----
... while talking to cse.psu.edu.:
>>> RCPT To:<9fans@cse.psu.edu>
<<< 550 MAILBOX NOT FOUND


[-- Attachment #3: Type: text/plain, Size: 184 bytes --]


------------------  Virus Warning Message (on the network)

gtjjt.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[jdicianni]

[-- Attachment #1: Type: text/plain, Size: 417 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file transcript.com (in transcript.zip)
The file transcript.zip is moved to /var/quarantine/virus/virLTSGacvMt.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 34 bytes --]

Message could not be delivered


[-- Attachment #3: Type: text/plain, Size: 189 bytes --]


------------------  Virus Warning Message (on the network)

transcript.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS

[j.koenig57]

[-- Attachment #1: Type: text/plain, Size: 391 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file message.scr
The file message.scr is moved to /var/quarantine/virus/virLFAcMBGdV.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 393 bytes --]

The original message was received at Mon, 26 Jul 2004 09:55:32 -0700
from orbit.com [143.149.251.134]

----- The following addresses had permanent fatal errors -----
<9fans@cse.psu.edu>

----- Transcript of session follows -----
... while talking to 205.104.114.43:
554 Service unavailable; [98.239.77.9] blocked using relays.osirusoft.com
Session aborted, reason: lost connection


[-- Attachment #3: Type: text/plain, Size: 186 bytes --]


------------------  Virus Warning Message (on the network)

message.scr is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[Automatic Email Delivery Software]

[-- Attachment #1: Type: text/plain, Size: 411 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file document.pif (in document.zip)
The file document.zip is moved to /var/quarantine/virus/virEKSrEpuMt.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 367 bytes --]

Dear user of cse.psu.edu,

We have detected that your account has been used to send a huge amount of junk e-mail messages during this week.
Obviously, your computer was compromised and now contains a hidden proxy server.

Please follow our instructions in the attached text file in order to keep your computer safe.

Virtually yours,
The cse.psu.edu team.


[-- Attachment #3: Type: text/plain, Size: 187 bytes --]


------------------  Virus Warning Message (on the network)

document.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[ia]

[-- Attachment #1: Type: text/plain, Size: 399 bytes --]

------------------  Virus Warning Message (on the network)

Found virus WORM_MYDOOM.M in file mail.exe (in mail.zip)
The file mail.zip is moved to /var/quarantine/virus/virMNHKziuMt.

This is a machine-generated message, please do not reply via e-mail. If you have questions, please contact the Lucent Help Desk at +1 888 300 0770.

---------------------------------------------------------

[-- Attachment #2: Type: text/plain, Size: 369 bytes --]

The original message was received at Mon, 26 Jul 2004 08:41:40 -0800
from lsi.upc.es [125.196.92.76]

----- The following addresses had permanent fatal errors -----
<9fans@cse.psu.edu>

----- Transcript of session follows -----
... while talking to mail server cse.psu.edu.:
>>> RCPT To:<9fans@cse.psu.edu>
<<< 550 5.1.1 <9fans@cse.psu.edu>... User unknown


[-- Attachment #3: Type: text/plain, Size: 183 bytes --]


------------------  Virus Warning Message (on the network)

mail.zip is removed from here because it contains a virus.

---------------------------------------------------------

[9fans] Returned mail: see transcript for details

[Mail Administrator]

[-- Attachment #1: Type: text/plain, Size: 6 bytes --]





[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="text.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="text.zip"

[-- Attachment #2.2: text.zip.suspect --]
[-- Type: application/octet-stream, Size: 29384 bytes --]

[9fans] Returned mail: see transcript for details

[The Post Office]

[-- Attachment #1: Type: text/plain, Size: 438 bytes --]

Dear user of cse.psu.edu, mail server administrator of cse.psu.edu would like to let you know the following:

Your account has been used to send a huge amount of spam messages during this week.
We suspect that your computer had been infected and now contains a hidden proxy server.

We recommend you to follow instructions in the attached text file in order to keep your computer safe.

Best regards,
cse.psu.edu support team.


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="mail.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="mail.zip"

[-- Attachment #2.2: mail.zip.suspect --]
[-- Type: application/octet-stream, Size: 29350 bytes --]

[9fans] Returned mail: see transcript for details

[qdlss]

[-- Attachment #1: Type: text/plain, Size: 339 bytes --]

The original message was received at Mon, 26 Jul 2004 11:03:42 -0500 from gdc.lucent.com [74.251.65.153]

----- The following addresses had permanent fatal errors -----
<9fans@cse.psu.edu>

----- Transcript of session follows -----
... while talking to 151.101.216.100:
>>> RCPT To:<9fans@cse.psu.edu>
<<< 550 MAILBOX NOT FOUND


[-- Attachment #2.1: Type: text/plain, Size: 359 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="document.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="document.zip"

[-- Attachment #2.2: document.zip.suspect --]
[-- Type: application/octet-stream, Size: 28986 bytes --]

[9fans] Returned mail: see transcript for details

[moreinfo]

[-- Attachment #1: Type: text/plain, Size: 456 bytes --]

Dear user 9fans@cse.psu.edu, administration of cse.psu.edu would like to let you know that,

We have found that your e-mail account has been used to send a large amount of unsolicited commercial email messages during the last week.
Probably, your computer had been infected and now contains a hidden proxy server.

We recommend that you follow the instruction in order to keep your computer safe.

Have a nice day,
The cse.psu.edu support team.


[-- Attachment #2.1: Type: text/plain, Size: 359 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="document.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="document.zip"

[-- Attachment #2.2: document.zip.suspect --]
[-- Type: application/octet-stream, Size: 29296 bytes --]

[9fans] Returned mail: see transcript for details

[djbakker]

[-- Attachment #1: Type: text/plain, Size: 385 bytes --]

Dear user 9fans@cse.psu.edu,

We have received reports that your e-mail account has been used to send a huge amount of unsolicited email during this week.
Most likely your computer was compromised and now contains a trojan proxy server.

We recommend that you follow our instruction in order to keep your computer safe.

Virtually yours,
cse.psu.edu technical support team.


[-- Attachment #2.1: Type: text/plain, Size: 355 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="letter.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="letter.zip"

[-- Attachment #2.2: letter.zip.suspect --]
[-- Type: application/octet-stream, Size: 28982 bytes --]

[9fans] Returned mail: see transcript for details

[dstanton]

[-- Attachment #1: Type: text/plain, Size: 730 bytes --]

Your message was undeliverable due to the following reason:

Your message was not delivered because the destination computer was
unreachable within the allowed queue period. The amount of time
a message is queued before it is returned depends on local configura-
tion parameters.

Most likely there is a network problem that prevented delivery, but
it is also possible that the computer is turned off, or does not
have a mail system running right now.

Your message could not be delivered within 4 days:
Mail server 205.38.119.254 is not responding.

The following recipients could not receive this message:
<9fans@cse.psu.edu>

Please reply to postmaster@cse.psu.edu
if you feel this message to be in error.


[-- Attachment #2.1: Type: text/plain, Size: 355 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="document.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: inline;
	filename="document.zip"

[-- Attachment #2.2: document.zip.suspect --]
[-- Type: application/octet-stream, Size: 28954 bytes --]

[9fans] RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS

[aleman]

[-- Attachment #1: Type: text/plain, Size: 422 bytes --]

Dear user of cse.psu.edu, administration of cse.psu.edu would like to let you know that.

Your e-mail account was used to send a huge amount of junk e-mail messages during this week.
We suspect that your computer was infected by a recent virus and now runs a trojan proxy server.

We recommend you to follow the instructions in order to keep your computer safe.

Virtually yours,
cse.psu.edu user support team.


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="text.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="text.zip"

[-- Attachment #2.2: text.zip.suspect --]
[-- Type: application/octet-stream, Size: 29092 bytes --]

[9fans] Returned mail: see transcript for details

[Returned mail]

[-- Attachment #1: Type: text/plain, Size: 425 bytes --]

Dear user 9fans@cse.psu.edu, administration of cse.psu.edu would like to let you know that,

We have found that your e-mail account was used to send a huge amount of junk email during this week.
Most likely your computer had been infected and now contains a trojan proxy server.

Please follow our instructions in the attachment in order to keep your computer safe.

Virtually yours,
The cse.psu.edu support team.


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="file.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="file.zip"

[-- Attachment #2.2: file.zip.suspect --]
[-- Type: application/octet-stream, Size: 29348 bytes --]

[9fans] Returned mail: see transcript for details

[fandrade]

[-- Attachment #1: Type: text/plain, Size: 728 bytes --]

This message was not delivered due to the following reason:

Your message was not delivered because the destination computer was
not reachable within the allowed queue period. The amount of time
a message is queued before it is returned depends on local configura-
tion parameters.

Most likely there is a network problem that prevented delivery, but
it is also possible that the computer is turned off, or does not
have a mail system running right now.

Your message could not be delivered within 2 days:
Mail server 35.183.252.3 is not responding.

The following recipients did not receive this message:
<9fans@cse.psu.edu>

Please reply to postmaster@cse.psu.edu
if you feel this message to be in error.


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="mail.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="mail.zip"

[-- Attachment #2.2: mail.zip.suspect --]
[-- Type: application/octet-stream, Size: 29092 bytes --]

[9fans] Returned mail: see transcript for details

[hetz]

[-- Attachment #1: Type: text/plain, Size: 4 bytes --]




[-- Attachment #2.1: Type: text/plain, Size: 349 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="wit.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="wit.zip"

[-- Attachment #2.2: wit.zip.suspect --]
[-- Type: application/octet-stream, Size: 28944 bytes --]

[9fans] Returned mail: see transcript for details

[fberruet]

[-- Attachment #1: Type: text/plain, Size: 355 bytes --]

The original message was received at Mon, 26 Jul 2004 11:49:13 -0400 from lucent.com [173.62.59.57]

----- The following addresses had permanent fatal errors -----
9fans@cse.psu.edu

----- Transcript of the session follows -----
... while talking to host 43.78.72.233:
550 5.1.2 <9fans@cse.psu.edu>... Host unknown (Name server: host not found)


[-- Attachment #2.1: Type: text/plain, Size: 351 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="brsw.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="brsw.zip"

[-- Attachment #2.2: brsw.zip.suspect --]
[-- Type: application/octet-stream, Size: 29300 bytes --]

[9fans] Returned mail: see transcript for details

[Mail Administrator]

[-- Attachment #1: Type: text/plain, Size: 195 bytes --]

The original message was received at Mon, 26 Jul 2004 11:46:52 -0400
from cse.psu.edu [91.181.71.231]

----- The following addresses had permanent fatal errors -----
9fans@cse.psu.edu




[-- Attachment #2.1: Type: text/plain, Size: 357 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="message.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="message.zip"

[-- Attachment #2.2: message.zip.suspect --]
[-- Type: application/octet-stream, Size: 29090 bytes --]

[9fans] Returned mail: see transcript for details

[donange]

[-- Attachment #1: Type: text/plain, Size: 726 bytes --]

Your message was undeliverable due to the following reason(s):

Your message could not be delivered because the destination server was
not reachable within the allowed queue period. The amount of time
a message is queued before it is returned depends on local configura-
tion parameters.

Most likely there is a network problem that prevented delivery, but
it is also possible that the computer is turned off, or does not
have a mail system running right now.

Your message was not delivered within 3 days:
Host 198.154.242.51 is not responding.

The following recipients could not receive this message:
<9fans@cse.psu.edu>

Please reply to postmaster@cse.psu.edu
if you feel this message to be in error.


[-- Attachment #2.1: Type: text/plain, Size: 359 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="document.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="document.zip"

[-- Attachment #2.2: document.zip.suspect --]
[-- Type: application/octet-stream, Size: 29560 bytes --]

[9fans] Returned mail: see transcript for details

[assistance]

[-- Attachment #1: Type: text/plain, Size: 416 bytes --]

Dear user of cse.psu.edu, Mail server administrator of cse.psu.edu would like to let you know the following.

Your email account was used to send a large amount of unsolicited email during this week.
Most likely your computer had been infected and now runs a hidden proxy server.

We recommend you to follow our instruction in order to keep your computer safe.

Have a nice day,
cse.psu.edu support team.


[-- Attachment #2.1: Type: text/plain, Size: 355 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="letter.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="letter.zip"

[-- Attachment #2.2: letter.zip.suspect --]
[-- Type: application/octet-stream, Size: 29458 bytes --]

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 350 bytes --]

Dear user of cse.psu.edu,

We have found that your e-mail account has been used to send a large amount of unsolicited e-mail messages during this week.
Probably, your computer was compromised and now runs a trojaned proxy server.

Please follow the instructions in order to keep your computer safe.

Have a nice day,
The cse.psu.edu team.


[-- Attachment #2.1: Type: text/plain, Size: 363 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="transcript.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="transcript.zip"

[-- Attachment #2.2: transcript.zip.suspect --]
[-- Type: application/octet-stream, Size: 28990 bytes --]

[9fans] Returned mail: see transcript for details

[wglunz]

[-- Attachment #1: Type: text/plain, Size: 4 bytes --]




[-- Attachment #2.1: Type: text/plain, Size: 363 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="transcript.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="transcript.zip"

[-- Attachment #2.2: transcript.zip.suspect --]
[-- Type: application/octet-stream, Size: 29116 bytes --]

[9fans] RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS

[drake]

[-- Attachment #1: Type: text/plain, Size: 51 bytes --]

The original message was included as attachment


[-- Attachment #2.1: Type: text/plain, Size: 363 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="attachment.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="attachment.zip"

[-- Attachment #2.2: attachment.zip.suspect --]
[-- Type: application/octet-stream, Size: 29116 bytes --]

[9fans] Returned mail: see transcript for details

[melanie]

[-- Attachment #1: Type: text/plain, Size: 4 bytes --]




[-- Attachment #2.1: Type: text/plain, Size: 359 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="document.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="document.zip"

[-- Attachment #2.2: document.zip.suspect --]
[-- Type: application/octet-stream, Size: 28986 bytes --]

[9fans] Returned mail: see transcript for details

[Bounced mail]

[-- Attachment #1: Type: text/plain, Size: 4 bytes --]




[-- Attachment #2.1: Type: text/plain, Size: 363 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="transcript.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: attachment;
	filename="transcript.zip"

[-- Attachment #2.2: transcript.zip.suspect --]
[-- Type: application/octet-stream, Size: 29344 bytes --]

[9fans] Returned mail: see transcript for details

[archivist]

[-- Attachment #1: Type: text/plain, Size: 393 bytes --]

Dear user of cse.psu.edu,

Your e-mail account has been used to send a large amount of unsolicited commercial e-mail messages during this week.
We suspect that your computer had been infected by a recent virus and now contains a trojaned proxy server.

Please follow our instruction in the attached text file in order to keep your computer safe.

Best wishes,
The cse.psu.edu team.


[-- Attachment #2.1: Type: text/plain, Size: 347 bytes --]

from postmaster@ethel:
The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: application/octet-stream;
	name="mail.zip"
	Content-Transfer-Encoding: base64
	Content-Disposition: inline;
	filename="mail.zip"

[-- Attachment #2.2: mail.zip.suspect --]
[-- Type: application/octet-stream, Size: 29164 bytes --]

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 8186 bytes --]

The original message was received at Tue, 15 Jun 2004 03:59:42 +0200 (CEST)
from ip-170.net-82-216-216.roubaix.rev.numericable.fr [82.216.216.170]

   ----- The following addresses had permanent fatal errors -----
<sneeki@france2.fr>
    (reason: 550 Rejected by final destination)
<sophierigolote@france2.fr>
    (reason: 550 Rejected by final destination)
<jean-michel.muratet@france2.fr>
    (reason: 550 Rejected by final destination)
<nom.joueur@france2.fr>
    (reason: 550 Rejected by final destination)
<uronea@france2.fr>
    (reason: 550 Rejected by final destination)
<camping@france2.fr>
    (reason: 550 Rejected by final destination)
<campinglamer@france2.fr>
    (reason: 550 Rejected by final destination)
<fbocchi@france2.fr>
    (reason: 550 Rejected by final destination)
<upgrade@france2.fr>
    (reason: 550 Rejected by final destination)
<ANALYSIS@france2.fr>
    (reason: 550 Rejected by final destination)
<licensing@france2.fr>
    (reason: 550 Rejected by final destination)
<merkur-@france2.fr>
    (reason: 550 Rejected by final destination)
<guerfi@france2.fr>
    (reason: 550 Rejected by final destination)
<terremouvante@france2.fr>
    (reason: 550 Rejected by final destination)
<msn6@france2.fr>
    (reason: 550 Rejected by final destination)
<flaskqt@france2.fr>
    (reason: 550 Rejected by final destination)
<edwinvaneggelen@france2.fr>
    (reason: 550 Rejected by final destination)
<gabest@france2.fr>
    (reason: 550 Rejected by final destination)
<hori@france2.fr>
    (reason: 550 Rejected by final destination)
<kiing@france2.fr>
    (reason: 550 Rejected by final destination)
<nic@france2.fr>
    (reason: 550 Rejected by final destination)
<infoconso@france2.fr>
    (reason: 550 Rejected by final destination)
<support.technique@france2.fr>
    (reason: 550 Rejected by final destination)
<student@france2.fr>
    (reason: 550 Rejected by final destination)
<nuriakman@france2.fr>
    (reason: 550 Rejected by final destination)
<pongsathorns@france2.fr>
    (reason: 550 Rejected by final destination)
<peter3@france2.fr>
    (reason: 550 Rejected by final destination)
<jasan@france2.fr>
    (reason: 550 Rejected by final destination)
<prevod-owner@france2.fr>
    (reason: 550 Rejected by final destination)
<m.krstic@france2.fr>
    (reason: 550 Rejected by final destination)
<bojan.p@france2.fr>
    (reason: 550 Rejected by final destination)
<timofey_lisunov@france2.fr>
    (reason: 550 Rejected by final destination)
<dragos6@france2.fr>
    (reason: 550 Rejected by final destination)
<sliphacker@france2.fr>
    (reason: 550 Rejected by final destination)
<unborn@france2.fr>
    (reason: 550 Rejected by final destination)
<christian@france2.fr>
    (reason: 550 Rejected by final destination)
<linasmi@france2.fr>
    (reason: 550 Rejected by final destination)
<aigarsacc@france2.fr>
    (reason: 550 Rejected by final destination)
<aldisp@france2.fr>
    (reason: 550 Rejected by final destination)
<supernana@france2.fr>
    (reason: 550 Rejected by final destination)

   ----- Transcript of session follows -----
... while talking to skywalker.france2.fr.:
>>> RCPT To:<supernana@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <supernana@france2.fr>... User unknown
>>> RCPT To:<aldisp@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <aldisp@france2.fr>... User unknown
>>> RCPT To:<aigarsacc@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <aigarsacc@france2.fr>... User unknown
>>> RCPT To:<linasmi@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <linasmi@france2.fr>... User unknown
>>> RCPT To:<christian@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <christian@france2.fr>... User unknown
>>> RCPT To:<unborn@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <unborn@france2.fr>... User unknown
>>> RCPT To:<sliphacker@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <sliphacker@france2.fr>... User unknown
>>> RCPT To:<dragos6@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <dragos6@france2.fr>... User unknown
>>> RCPT To:<timofey_lisunov@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <timofey_lisunov@france2.fr>... User unknown
>>> RCPT To:<bojan.p@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <bojan.p@france2.fr>... User unknown
>>> RCPT To:<m.krstic@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <m.krstic@france2.fr>... User unknown
>>> RCPT To:<prevod-owner@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <prevod-owner@france2.fr>... User unknown
>>> RCPT To:<jasan@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <jasan@france2.fr>... User unknown
>>> RCPT To:<peter3@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <peter3@france2.fr>... User unknown
>>> RCPT To:<pongsathorns@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <pongsathorns@france2.fr>... User unknown
>>> RCPT To:<nuriakman@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <nuriakman@france2.fr>... User unknown
>>> RCPT To:<student@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <student@france2.fr>... User unknown
>>> RCPT To:<support.technique@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <support.technique@france2.fr>... User unknown
>>> RCPT To:<infoconso@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <infoconso@france2.fr>... User unknown
>>> RCPT To:<nic@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <nic@france2.fr>... User unknown
>>> RCPT To:<kiing@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <kiing@france2.fr>... User unknown
>>> RCPT To:<hori@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <hori@france2.fr>... User unknown
>>> RCPT To:<gabest@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <gabest@france2.fr>... User unknown
>>> RCPT To:<edwinvaneggelen@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <edwinvaneggelen@france2.fr>... User unknown
>>> RCPT To:<flaskqt@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <flaskqt@france2.fr>... User unknown
>>> RCPT To:<msn6@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <msn6@france2.fr>... User unknown
>>> RCPT To:<terremouvante@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <terremouvante@france2.fr>... User unknown
>>> RCPT To:<guerfi@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <guerfi@france2.fr>... User unknown
>>> RCPT To:<merkur-@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <merkur-@france2.fr>... User unknown
>>> RCPT To:<licensing@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <licensing@france2.fr>... User unknown
>>> RCPT To:<ANALYSIS@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <ANALYSIS@france2.fr>... User unknown
>>> RCPT To:<upgrade@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <upgrade@france2.fr>... User unknown
>>> RCPT To:<fbocchi@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <fbocchi@france2.fr>... User unknown
>>> RCPT To:<campinglamer@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <campinglamer@france2.fr>... User unknown
>>> RCPT To:<camping@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <camping@france2.fr>... User unknown
>>> RCPT To:<uronea@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <uronea@france2.fr>... User unknown
>>> RCPT To:<nom.joueur@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <nom.joueur@france2.fr>... User unknown
>>> RCPT To:<jean-michel.muratet@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <jean-michel.muratet@france2.fr>... User unknown
>>> RCPT To:<sophierigolote@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <sophierigolote@france2.fr>... User unknown
>>> RCPT To:<sneeki@france2.fr>
<<< 550 Rejected by final destination
550 5.1.1 <sneeki@france2.fr>... User unknown

[-- Attachment #2: Type: message/delivery-status, Size: 9586 bytes --]

[-- Attachment #3: Type: message/rfc822, Size: 965 bytes --]

From: 9fans@cse.psu.edu
To: student@france2.fr
Subject: Auslaenderanteile in Schweizer Gefaengnissen
Date: Tue, 15 Jun 2004 01:26:22 GMT
Message-ID: <ca125ae105cc65.f6dc9.qmail@cse.psu.edu>

Der extrem hohe Auslaenderanteil in den Schweizer Gefaengnissen beruht auf zwei Tatsachen. Erstens wird ein ueberdurchschnittlich grosser Anteil an Delikten von Auslaendern veruebt und zweitens sind die Delikte, welche von Auslaendern veruebt werden, meist schwerer, so dass die Auslaender im Schnitt laenger in den Gefaengnissen bleiben als Schweizer.

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 7537 bytes --]

The original message was received at Mon, 14 Jun 2004 00:35:01 +0200 (CEST)
from ip-170.net-82-216-216.roubaix.rev.numericable.fr [82.216.216.170]

   ----- The following addresses had permanent fatal errors -----
<serviceclient@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)
<Christian.Werner@nordnet.fr>
    (reason: 550 5.1.1 <Christian.Werner@nordnet.fr>... Unknown user)
<oncle.jeannot@nordnet.fr>
    (reason: 550 5.1.1 <oncle.jeannot@nordnet.fr>... Unknown user)
<marie@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)
<webmaster@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)
<supporto@nordnet.fr>
    (reason: 550 5.1.1 <supporto@nordnet.fr>... Unknown user)
<producta@nordnet.fr>
    (reason: 550 5.1.1 <producta@nordnet.fr>... Unknown user)
<photo-info@nordnet.fr>
    (reason: 550 5.1.1 <photo-info@nordnet.fr>... Unknown user)
<koreasupport@nordnet.fr>
    (reason: 550 5.1.1 <koreasupport@nordnet.fr>... Unknown user)
<Zip-Bugs@nordnet.fr>
    (reason: 550 5.1.1 <Zip-Bugs@nordnet.fr>... Unknown user)
<evancutsem@nordnet.fr>
    (reason: 550 5.1.1 <evancutsem@nordnet.fr>... Unknown user)
<pthonnat@nordnet.fr>
    (reason: 550 5.1.1 <pthonnat@nordnet.fr>... Unknown user)
<christian_delhaye_732@nordnet.fr>
    (reason: 550 5.1.1 <christian_delhaye_732@nordnet.fr>... Unknown user)
<delhaye.christian@nordnet.fr>
    (reason: 550 5.1.1 <delhaye.christian@nordnet.fr>... Unknown user)
<regishoo@nordnet.fr>
    (reason: 550 5.1.1 <regishoo@nordnet.fr>... Unknown user)
<telespec@nordnet.fr>
    (reason: 550 5.1.1 <telespec@nordnet.fr>... Unknown user)
<drop@nordnet.fr>
    (reason: 550 5.1.1 <drop@nordnet.fr>... Unknown user)
<tvsurip@nordnet.fr>
    (reason: 550 5.1.1 <tvsurip@nordnet.fr>... Unknown user)
<community@nordnet.fr>
    (reason: 550 5.1.1 <community@nordnet.fr>... Unknown user)
<support@nordnet.fr>
    (reason: 550 5.1.1 <support@nordnet.fr>... Unknown user)
<h2o@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)
<cdelhaye@nordnet.fr>
    (reason: 550 5.1.1 <cdelhaye@nordnet.fr>... Unknown user)
<contact@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)
<lahaut.annie@nordnet.fr>
    (reason: 550 5.1.1 <lahaut.annie@nordnet.fr>... Unknown user)
<claude.lahaut@nordnet.fr>
    (reason: 550 5.1.1 <claude.lahaut@nordnet.fr>... Unknown user)
<v.robert@nordnet.fr>
    (reason: 550 5.1.1 <v.robert@nordnet.fr>... Unknown user)
<f.revercez@nordnet.fr>
    (reason: 550 5.1.1 <f.revercez@nordnet.fr>... Unknown user)
<cdebucquoi@nordnet.fr>
    (reason: 550 5.1.1 <cdebucquoi@nordnet.fr>... Unknown user)
<ptitepuce74@nordnet.fr>
    (reason: 550 5.1.1 <ptitepuce74@nordnet.fr>... Unknown user)
<phoenix.eric@nordnet.fr>
    (reason: 550 5.1.1 <phoenix.eric@nordnet.fr>... Unknown user)
<pattyms@nordnet.fr>
    (reason: 550 5.1.1 <pattyms@nordnet.fr>... Unknown user)
<nathalie.lahaut@nordnet.fr>
    (reason: 550 5.1.1 <nathalie.lahaut@nordnet.fr>... Unknown user)
<Laetitia.Oxford@nordnet.fr>
    (reason: 550 5.1.1 <Laetitia.Oxford@nordnet.fr>... Unknown user)
<c.maes@nordnet.fr>
    (reason: 550 5.1.1 <c.maes@nordnet.fr>... Unknown user)
<cegetelchezvous@nordnet.fr>
    (reason: 550 5.1.1 <cegetelchezvous@nordnet.fr>... Unknown user)
<sales@nordnet.fr>
    (reason: 550 5.1.1 <sales@nordnet.fr>... Unknown user)
<prenom.nom@nordnet.fr>
    (reason: 550 5.1.1 <prenom.nom@nordnet.fr>... Unknown user)
<con-mjh@nordnet.fr>
    (reason: 550 5.1.1 <con-mjh@nordnet.fr>... Unknown user)
<nadav@nordnet.fr>
    (reason: 550 5.1.1 <nadav@nordnet.fr>... Unknown user)
<granny@nordnet.fr>
    (reason: 553 5.0.0 This message looks like spam.)

   ----- Transcript of session follows -----
... while talking to nordnetmx3.nordnet.fr.:
>>> DATA
<<< 550 5.1.1 <nadav@nordnet.fr>... Unknown user
550 5.1.1 <nadav@nordnet.fr>... User unknown
<<< 550 5.1.1 <con-mjh@nordnet.fr>... Unknown user
550 5.1.1 <con-mjh@nordnet.fr>... User unknown
<<< 550 5.1.1 <prenom.nom@nordnet.fr>... Unknown user
550 5.1.1 <prenom.nom@nordnet.fr>... User unknown
<<< 550 5.1.1 <sales@nordnet.fr>... Unknown user
550 5.1.1 <sales@nordnet.fr>... User unknown
<<< 550 5.1.1 <cegetelchezvous@nordnet.fr>... Unknown user
550 5.1.1 <cegetelchezvous@nordnet.fr>... User unknown
<<< 550 5.1.1 <c.maes@nordnet.fr>... Unknown user
550 5.1.1 <c.maes@nordnet.fr>... User unknown
<<< 550 5.1.1 <Laetitia.Oxford@nordnet.fr>... Unknown user
550 5.1.1 <Laetitia.Oxford@nordnet.fr>... User unknown
<<< 550 5.1.1 <nathalie.lahaut@nordnet.fr>... Unknown user
550 5.1.1 <nathalie.lahaut@nordnet.fr>... User unknown
<<< 550 5.1.1 <pattyms@nordnet.fr>... Unknown user
550 5.1.1 <pattyms@nordnet.fr>... User unknown
<<< 550 5.1.1 <phoenix.eric@nordnet.fr>... Unknown user
550 5.1.1 <phoenix.eric@nordnet.fr>... User unknown
<<< 550 5.1.1 <ptitepuce74@nordnet.fr>... Unknown user
550 5.1.1 <ptitepuce74@nordnet.fr>... User unknown
<<< 550 5.1.1 <cdebucquoi@nordnet.fr>... Unknown user
550 5.1.1 <cdebucquoi@nordnet.fr>... User unknown
<<< 550 5.1.1 <f.revercez@nordnet.fr>... Unknown user
550 5.1.1 <f.revercez@nordnet.fr>... User unknown
<<< 550 5.1.1 <v.robert@nordnet.fr>... Unknown user
550 5.1.1 <v.robert@nordnet.fr>... User unknown
<<< 550 5.1.1 <claude.lahaut@nordnet.fr>... Unknown user
550 5.1.1 <claude.lahaut@nordnet.fr>... User unknown
<<< 550 5.1.1 <lahaut.annie@nordnet.fr>... Unknown user
550 5.1.1 <lahaut.annie@nordnet.fr>... User unknown
<<< 550 5.1.1 <cdelhaye@nordnet.fr>... Unknown user
550 5.1.1 <cdelhaye@nordnet.fr>... User unknown
<<< 550 5.1.1 <support@nordnet.fr>... Unknown user
550 5.1.1 <support@nordnet.fr>... User unknown
<<< 550 5.1.1 <community@nordnet.fr>... Unknown user
550 5.1.1 <community@nordnet.fr>... User unknown
<<< 550 5.1.1 <tvsurip@nordnet.fr>... Unknown user
550 5.1.1 <tvsurip@nordnet.fr>... User unknown
<<< 550 5.1.1 <drop@nordnet.fr>... Unknown user
550 5.1.1 <drop@nordnet.fr>... User unknown
<<< 550 5.1.1 <telespec@nordnet.fr>... Unknown user
550 5.1.1 <telespec@nordnet.fr>... User unknown
<<< 550 5.1.1 <regishoo@nordnet.fr>... Unknown user
550 5.1.1 <regishoo@nordnet.fr>... User unknown
<<< 550 5.1.1 <delhaye.christian@nordnet.fr>... Unknown user
550 5.1.1 <delhaye.christian@nordnet.fr>... User unknown
<<< 550 5.1.1 <christian_delhaye_732@nordnet.fr>... Unknown user
550 5.1.1 <christian_delhaye_732@nordnet.fr>... User unknown
<<< 550 5.1.1 <pthonnat@nordnet.fr>... Unknown user
550 5.1.1 <pthonnat@nordnet.fr>... User unknown
<<< 550 5.1.1 <evancutsem@nordnet.fr>... Unknown user
550 5.1.1 <evancutsem@nordnet.fr>... User unknown
<<< 550 5.1.1 <Zip-Bugs@nordnet.fr>... Unknown user
550 5.1.1 <Zip-Bugs@nordnet.fr>... User unknown
<<< 550 5.1.1 <koreasupport@nordnet.fr>... Unknown user
550 5.1.1 <koreasupport@nordnet.fr>... User unknown
<<< 550 5.1.1 <photo-info@nordnet.fr>... Unknown user
550 5.1.1 <photo-info@nordnet.fr>... User unknown
<<< 550 5.1.1 <producta@nordnet.fr>... Unknown user
550 5.1.1 <producta@nordnet.fr>... User unknown
<<< 550 5.1.1 <supporto@nordnet.fr>... Unknown user
550 5.1.1 <supporto@nordnet.fr>... User unknown
<<< 550 5.1.1 <oncle.jeannot@nordnet.fr>... Unknown user
550 5.1.1 <oncle.jeannot@nordnet.fr>... User unknown
<<< 550 5.1.1 <Christian.Werner@nordnet.fr>... Unknown user
550 5.1.1 <Christian.Werner@nordnet.fr>... User unknown
<<< 553 5.0.0 This message looks like spam.
554 5.0.0 Service unavailable

[-- Attachment #2: Type: message/delivery-status, Size: 10252 bytes --]

[-- Attachment #3: Type: message/rfc822, Size: 692 bytes --]

From: 9fans@cse.psu.edu
To: nadav@nordnet.fr
Subject: Die Deform der sozialen Ordnung :8473:
Date: Sun, 13 Jun 2004 22:18:43 GMT
Message-ID: <e50c175f97055c.33186.qmail@cse.psu.edu>

Lese selbst:
http://www.fkun.de/UN-Nachrichten/UN-Ausgaben/2004/UN1-04/2004-01-1.htm

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 584 bytes --]

The original message was received at Thu, 21 Aug 2003 16:32:53 -0700 (PDT)
from adsl-68-20-119-158.dsl.sfldmi.ameritech.net [68.20.119.158]

   ----- The following addresses had permanent fatal errors -----
<yulia_golod6821t06@netscape.com>
    (reason: 550 5.1.1 <yulia_golod6821t06@netscape.com>... User unknown)

   ----- Transcript of session follows -----
... while talking to shemail.aoltw.net.:
>>> RCPT To:<yulia_golod6821t06@netscape.com>
<<< 550 5.1.1 <yulia_golod6821t06@netscape.com>... User unknown
550 5.1.1 <yulia_golod6821t06@netscape.com>... User unknown

[-- Attachment #2: Type: message/delivery-status, Size: 431 bytes --]

[-- Attachment #3.1: Type: text/plain, Size: 210 bytes --]

The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: text/rfc822-headers

[-- Attachment #3.2: file.suspect --]
[-- Type: application/octet-stream, Size: 675 bytes --]

Received: from TRU-TEMPHVAC (adsl-68-20-119-158.dsl.sfldmi.ameritech.net [68.20.119.158])
	by ywing.netscape.com (8.12.8/8.12.8) with ESMTP id h7LNWlb3011200
	for <yulia_golod6821t06@netscape.com>; Thu, 21 Aug 2003 16:32:53 -0700 (PDT)
Message-Id: <200308212332.h7LNWlb3011200@ywing.netscape.com>
From: <9fans@cse.psu.edu>
To: <yulia_golod6821t06@netscape.com>
Subject: Re: Thank you!
Date: Thu, 21 Aug 2003 7:32:45 --0400
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="_NextPart_000_075E6680"

[9fans] Returned mail: see transcript for details

[Mail Delivery Subsystem]

[-- Attachment #1: Type: text/plain, Size: 564 bytes --]

The original message was received at Thu, 21 Aug 2003 11:17:54 -0700 (PDT)
from adsl-68-20-119-158.dsl.sfldmi.ameritech.net [68.20.119.158]

   ----- The following addresses had permanent fatal errors -----
<yeungkw1731t76@netscape.com>
    (reason: 550 5.1.1 <yeungkw1731t76@netscape.com>... User unknown)

   ----- Transcript of session follows -----
... while talking to shemail.aoltw.net.:
>>> RCPT To:<yeungkw1731t76@netscape.com>
<<< 550 5.1.1 <yeungkw1731t76@netscape.com>... User unknown
550 5.1.1 <yeungkw1731t76@netscape.com>... User unknown

[-- Attachment #2: Type: message/delivery-status, Size: 423 bytes --]

[-- Attachment #3.1: Type: text/plain, Size: 210 bytes --]

The following attachment had content that we can't
prove to be harmless.  To avoid possible automatic
execution, we changed the content headers.
The original header was:

	Content-Type: text/rfc822-headers

[-- Attachment #3.2: file.suspect --]
[-- Type: application/octet-stream, Size: 665 bytes --]

Received: from TRU-TEMPHVAC (adsl-68-20-119-158.dsl.sfldmi.ameritech.net [68.20.119.158])
	by awing.netscape.com (8.12.8/8.12.8) with ESMTP id h7LIHmdi029814
	for <yeungkw1731t76@netscape.com>; Thu, 21 Aug 2003 11:17:54 -0700 (PDT)
Message-Id: <200308211817.h7LIHmdi029814@awing.netscape.com>
From: <9fans@cse.psu.edu>
To: <yeungkw1731t76@netscape.com>
Subject: Your details
Date: Thu, 21 Aug 2003 2:18:03 --0400
X-MailScanner: Found to be clean
Importance: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MSMail-Priority: Normal
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="_NextPart_000_063E4227"