[email] You need to update your computer system

abuse_...@st.thrush.com

unread,

Jul 21, 2003, 10:40:52 PM7/21/03

to

From zahra...@rbwells.demon.co.uk Mon Jul 21 07:52:10 2003
Received: from mx.oau.org (mx.oau.org [67.96.199.25])
by tarpit.thrush.com (8.12.6/8.12.6) with ESMTP id h6LBq7R0015009
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)
for <spamv...@target.site>; Mon, 21 Jul 2003 07:52:09 -0400 (EDT)
Received: from c68.116.248.25.ts46v-01.dntn.tx.charter.com (c68.116.248.25.ts46v-01.dntn.tx.charter.com [68.116.248.25])
by mx.oau.org (8.12.8p1/8.12.8) with SMTP id h6LBpxIa011364
for <spamv...@target.site>; Mon, 21 Jul 2003 07:52:02 -0400 (EDT)
(envelope-from zahra...@rbwells.demon.co.uk)
Received: from (HELO chlbj) [59.128.31.210] by c68.116.248.25.ts46v-01.dntn.tx.charter.com id 0OTUsB37U25j for <spamv...@target.site>; Mon, 21 Jul 2003 09:48:50 -0300
Message-ID: <4535-bq6q-4p...@xumd.t.lwu>
From: "" <zahra...@rbwells.demon.co.uk>
Reply-To: "" <zahra...@rbwells.demon.co.uk>
To: spamv...@target.site
Subject: You need to update your computer system
Date: Mon, 21 Jul 03 09:48:50 GMT
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="D0_6AB8..AAE2__2.34_"
X-Priority: 3
X-MSMail-Priority: Normal

--D0_6AB8..AAE2__2.34_
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>

<head>

</head>
<body bgcolor=3D"#FFFFFF">

<div align=3D"left">
<table border=3D"3" cellpadding=3D"2" cellspacing=3D"0" style=3D"border-=
collapse: collapse" width=3D"596" height=3D"367" id=3D"AutoNumber1">
<tr>
<td vAlign=3D"bottom" align=3D"middle" width=3D"585" bgColor=3D"=
#FFFFFF" height=3D"40" border=3D"0">

Norton Antivirus 2003 Deluxe Package 
 
Download=
able Version
 

<img alt=3D"Norton AntiVirus Box Photo" src=3D"http://www.9262992677=
com/images/03.gif" width=3D"150" height=3D"143"></td>
</tr>
<tr>
<td align=3D"middle" bgColor=3D"#ffdb00" height=3D"606" width=3D=
"585">
Sale <s>59.95</s>  only $ 29.99 
 Lim=
ited Time<f=
ont size=3D"4">>>><a href=3D"http://www.9262992677.com">CLICK
HERE TO PROTECT YOUR COMPUTER</a><<<
Features - =
Norton
AntiVirus 2003Norton AntiVirus is the world's
most trusted anti-virus solution. Now it repairs common virus
infections automatically, without interrupting your work. 
 
NEW! Automatic removal of ma=
ny
viruses lets you work without interruption. 
 
NEW! Script Blocking detects=

script-based threats such as the "I Love You" and &quo=
t;Anna Kournikova"
viruses, even before new virus definitions are created for them.=
 
 
NEW! Scans and cleans outgoi=
ng
e-mail messages to prevent sending infected files from your PC. =
 
 
NEW! Built-in links take you=

directly to the Symantec Security Response Web site (formerly kn=
own as
Symantec AntiVirus Research Center) for additional information o=
n
specific viruses just when you need it most. 
 
Automatically scans e-mail messages and attachments in standard =
POP3
clients, including Microsoft Outlook, Eudora, and Netscape Mail.=

Protects against viruses, Trojan horses, and malicious ActiveX c=
ode
and Java applets, even in compressed files.   <=
/p>

>>><fo=
nt size=3D"4"><a href=3D"http://=
www.9262992677.com">CLICK
HERE TO PROTECT YOUR COMPUTER</a><<<
You have received this email from Email Marketers as a result of
registering at one of our Marketing Partner Sites. We support responsible =
use
of the internet. Our policy is to comply with all known governmental laws =
and
regulations covering commercial e-mail. If you wish to stop receiving
marketing offers from us <A
href=3D"http://www.9262992677.com/remove.html">Click this link</A> to
remove yourself permanently from our opted-in email list. We will remove y=
our
email within 48 hours.</td>
</tr>

</table>
</div>
</DIV></BODY></HTML>zpjdysbknu
lvbo xjpz j woi cj
umnej

--D0_6AB8..AAE2__2.34_--

--
All postings to news.admin.net-abuse.sightings are unconfirmed and
unverified unless stated otherwise by the moderators. All opinions
expressed above are considered the opinions of the original poster,
not the moderators or their respective employers.

For a copy of the guidelines to this group, see:
<URL:http://www.killfile.org/~tskirvin/nana/>

Jonas Maebe

unread,

Jul 25, 2003, 12:41:23 PM7/25/03

to

Return-path: <sade...@keromail.com>
Envelope-to: x
Delivery-date: Fri, 25 Jul 2003 18:00:38 +0200
Received: from 200-163-190-030.paemt7001.dsl.brasiltelecom.net.br
(200-163-190-030.paemt7001.dsl.brasiltelecom.net.br [200.163.190.30])
by dobit2.rug.ac.be (8.12.8/8.12.8) with SMTP id h6PG0CFY020296
for <x>; Fri, 25 Jul 2003 18:00:16 +0200 (MEST)
Received: from 0gf.yd652.com [117.242.83.44] by
200-163-190-030.paemt7001.dsl.brasiltelecom.net.br with SMTP; Fri, 25
Jul 2003 17:53:31 +0100
Message-ID: <a---$23ixy32...@7jghz59.3c.cv>
From: "" <sade...@keromail.com>
To: <x>
Subject: fwd: You need to update your computer system
Date: Fri, 25 Jul 03 17:53:31 GMT
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="BEF9AF.1_7"
X-Priority: 3
X-MSMail-Priority: Normal

This is a multi-part message in MIME format.

--BEF9AF.1_7
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>

<head>

</head>
<body bgcolor=3D"#FFFFFF">

</table>
</div>
</DIV></BODY></HTML>iqv l iygax y endhb cwsntqb
brmrh
nujgkydunjib aj yvzkliv
zs

ytarf pfntgbnvy

--BEF9AF.1_7--

gwalter+NA...@gwalter.demon.co.uk

unread,

Jul 26, 2003, 3:15:47 AM7/26/03

to

Cc: headers have been removed, and To: headers munged, as have any other
addresses belonging to this site (E&OE). HTML has been doctored as follows,
to prevent usable hotlinks or rendering in newsreaders that do such things:
1) http:// has been replaced by $http$:||
2) < has been replaced by {
3) / has been replaced by |

NB ISPs mentioned below received _unmunged_ copies
ie the munging is only done for posting to NANAS.

#############################################################################
## Complete Email, with Headers ##
#############################################################################

From ho...@leehom.net Sat Jul 26 01:13:05 2003
Return-Path: {ho...@leehom.net>
Received: from localhost (root@localhost [127.0.0.1])
by jupiter.$munged$.demon.co.uk (8.12.9|8.12.9) with ESMTP id h6Q0A9B9029651
for {$munged$@$munged$.demon.co.uk>; Sat, 26 Jul 2003 01:13:05 +0100
Received: from pop3.demon.co.uk
by localhost with POP3 (fetchmail-6.2.1)
for $munged$@$munged$.demon.co.uk (multi-drop); Sat, 26 Jul 2003 01:13:05 +0100 (BST)
Received: from punt-3.mail.demon.net by mailstore
for $munged$@$munged$.demon.co.uk id 19gCbH-0006Vv-8i;
Sat, 26 Jul 2003 00:07:52 +0000
Received: from [202.64.221.237] (helo=TEST-NMS-C)
by punt-3.mail.demon.net with smtp id 19gCbH-0006Vv-8i
for $munged$@$munged$.demon.co.uk; Sat, 26 Jul 2003 00:07:52 +0000
Received: from 1hmm6.iof4j.net (HELO 2y3ts) [1.70.45.253] by TEST-NMS-C; Sat, 26 Jul 2003 04:01:03 +0300
Message-ID: {89$v05v-$$al17-c...@h1ob2.au>
From: "" {ho...@leehom.net>
Subject: You need to update your computer system
Date: Sat, 26 Jul 03 04:01:03 GMT
X-Mailer: MIME-tools 5.503 (Entity 5.501)
MIME-Version: 1.0
Content-Type: multipart|alternative;
boundary="4.3FB_9FED8_E0411CB._B.B"
X-Priority: 3
X-MSMail-Priority: Normal
X-Razored: Yes
X-SpamType: HTML multi-part
X-Domains: pacific.net.hk vsnl.net.in
To: $munged$

This is a multi-part message in MIME format.

--4.3FB_9FED8_E0411CB._B.B
Content-Type: text|html;
Content-Transfer-Encoding: quoted-printable

{html>

{head>

{|head>
{body bgcolor=3D"#FFFFFF">

{div align=3D"left">
{table border=3D"3" cellpadding=3D"2" cellspacing=3D"0" style=3D"border-=
collapse: collapse" width=3D"596" height=3D"367" id=3D"AutoNumber1">
{tr>
{td vAlign=3D"bottom" align=3D"middle" width=3D"585" bgColor=3D"=
#FFFFFF" height=3D"40" border=3D"0">
{p align=3D"center">{font face=3D"Arial">{b>{font size=3D"5">

Norton Antivirus 2003 Deluxe Package{|font>{br>
{|b>{br>
{|font>{font face=3D"Arial" color=3D"#ff0000" size=3D"2">{b>Download=
able Version
{|b> {|font>
{p align=3D"center">
{img alt=3D"Norton AntiVirus Box Photo" src=3D"$http$:||www.9262992677=
com|images|03.gif" width=3D"150" height=3D"143">{|td>
{|tr>
{tr>

{td align=3D"middle" bgColor=3D"#ffdb00" height=3D"606" width=3D=
"585">

{p>{font face=3D"Arial">Sale {s>59.95{|s>{font color=3D"#ff0000"=
>  {|font>{b>only $ 29.99{font color=3D"#C0C0C0" size=3D"2"> {|font>
{font color=3D"#C0C0C0" size=3D"1"> {|font>{font size=3D"1">Lim=
ited Time{|font>{|b>{|font>{p>{span style=3D"background-color: #C0C0C0">{f=
ont size=3D"4">>>>{|font>{|span>{font size=3D"4">{span style=3D"b=
ackground-color: #C0C0C0">{a href=3D"$http$:||www.9262992677.com">CLICK
HERE TO PROTECT YOUR COMPUTER{|a><<<{|span>{|font>{p>

{b>{font face=3D"Arial">{span class=3D"sysReqHeader">Features - =
Norton

AntiVirus 2003{|span>{|font>{|b>{p align=3D"left">{font face=3D"=

Arial">Norton AntiVirus is the world's
most trusted anti-virus solution. Now it repairs common virus
infections automatically, without interrupting your work. {br>
{br>

{span class=3D"LargeLetters">NEW!{|span> Automatic removal of ma=

ny
viruses lets you work without interruption. {br>
{br>

{span class=3D"LargeLetters">NEW!{|span> Script Blocking detects=

script-based threats such as the "I Love You" and &quo=
t;Anna Kournikova"
viruses, even before new virus definitions are created for them.=
{br>
{br>

{span class=3D"LargeLetters">NEW!{|span> Scans and cleans outgoi=

ng
e-mail messages to prevent sending infected files from your PC. =
{br>
{br>

{span class=3D"LargeLetters">NEW!{|span> Built-in links take you=

directly to the Symantec Security Response Web site (formerly kn=
own as
Symantec AntiVirus Research Center) for additional information o=
n
specific viruses just when you need it most. {br>
{br>
Automatically scans e-mail messages and attachments in standard =
POP3
clients, including Microsoft Outlook, Eudora, and Netscape Mail.=

{br>
{br>
Protects against viruses, Trojan horses, and malicious ActiveX c=
ode

and Java applets, even in compressed files.  {|font> {=
|p>
{p>{span style=3D"background-color: #C0C0C0">
{font size=3D"4" color=3D"#000080">>>>{|font>{|span>{fo=
nt size=3D"4">{span style=3D"background-color: #C0C0C0">{a href=3D"$http$:||=
www.9262992677.com">CLICK
HERE TO PROTECT YOUR COMPUTER{|a><<<{|span>{|font>{p al=

ign=3D"left">
{SMALL>You have received this email from Email Marketers as a result of
registering at one of our Marketing Partner Sites. We support responsible =
use
of the internet. Our policy is to comply with all known governmental laws =
and
regulations covering commercial e-mail. If you wish to stop receiving
marketing offers from us {A

href=3D"$http$:||www.9262992677.com|remove.html">Click this link{|A> to

remove yourself permanently from our opted-in email list. We will remove y=
our

email within 48 hours.{|SMALL>{|td>
{|tr>

{|table>
{|div>
{|DIV>{|BODY>{|HTML>b dgciuccrcyrim vp
vthbjvrjejrdzy hyfaiu

--4.3FB_9FED8_E0411CB._B.B--

Paul Wright

unread,

Jul 26, 2003, 6:33:45 AM7/26/03

to

The following message was received by a defunct address and posted to
news.admin.net-abuse.sightings by an automated script. The address which
received it has not asked to receive the message.

-----------------------------BEGIN SPAM MESSAGE--------------------------------

Return-path: <gyu...@phone.co.jp>
Envelope-to: REM...@verence.demon.co.uk
Delivery-date: Sat, 26 Jul 2003 11:33:14 +0100
Received: from mail by verence.REMOVED with dcc (Exim 3.36 #1 (Debian))
id 19gMMU-0000Fg-00
for <REM...@verence.demon.co.uk>; Sat, 26 Jul 2003 11:33:14 +0100
Received: from REMOVED by verence.REMOVED with fetchmail (Exim 3.36 #1
(Debian)) id 19gMMU-0000FC-00
for <REM...@verence.demon.co.uk>; Sat, 26 Jul 2003 11:33:14 +0100
Received: from pop3.demon.co.uk
by verence.REMOVED with POP3 (fetchmail-5.9.11)
for REM...@verence.demon.co.uk (multi-drop);
Sat, 26 Jul 2003 11:33:13 +0100 (BST)

Received: from punt-3.mail.demon.net by mailstore

for REM...@verence.demon.co.uk id 19gDnM-0005kJ-4U;
Sat, 26 Jul 2003 01:24:26 +0000
Received: from [213.89.59.127] (helo=c213-89-59-127.cm-upc.chello.se)
by punt-3.mail.demon.net with smtp id 19gDnM-0005kJ-4U
for REM...@verence.demon.co.uk; Sat, 26 Jul 2003 01:24:25 +0000
Received: from xcdi.qnri.org ([5.230.242.185]) by
c213-89-59-127.cm-upc.chello.se id <2840949-99996>; Sat, 26 Jul 2003 07:21:35
+0500
From: "" <gyu...@phone.co.jp>

Subject: You need to update your computer system

Date: Sat, 26 Jul 03 07:21:35 GMT
X-Mailer: The Bat! (v1.52f) Business
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="E.3_C4_E.._7EE__9B45B"
X-Priority: 3
X-MSMail-Priority: Normal
X-DCC-SdV-Metrics: verence 1179; Body=1 Fuz1=1 Fuz2=275

<html>

<head>

</head>
<body bgcolor="#FFFFFF">

Norton Antivirus 2003 Deluxe Package

Downloadable Version
 

<img alt="Norton AntiVirus Box Photo" src="http://www.9262992677com/images/03.gif" width="150" height="143"></td>
</tr>
<tr>
<td align="middle" bgColor="#ffdb00" height="606" width="585">
Sale <s>59.95</s>  only $ 29.99 
 Limited Time>>><a href="http://www.9262992677.com">CLICK

HERE TO PROTECT YOUR COMPUTER</a><<<

Features - Norton
AntiVirus 2003Norton AntiVirus is the world's

most trusted anti-virus solution. Now it repairs common virus
infections automatically, without interrupting your work.

NEW! Automatic removal of many

viruses lets you work without interruption.

NEW! Script Blocking detects
script-based threats such as the "I Love You" and "Anna Kournikova"
viruses, even before new virus definitions are created for them. 
 
NEW! Scans and cleans outgoing
e-mail messages to prevent sending infected files from your PC. 
 
NEW! Built-in links take you
directly to the Symantec Security Response Web site (formerly known as
Symantec AntiVirus Research Center) for additional information on

specific viruses just when you need it most.

Automatically scans e-mail messages and attachments in standard POP3

clients, including Microsoft Outlook, Eudora, and Netscape Mail.

Protects against viruses, Trojan horses, and malicious ActiveX code
and Java applets, even in compressed files.   

>>><a href="http://www.9262992677.com">CLICK
HERE TO PROTECT YOUR COMPUTER</a><<<

You have received this email from Email Marketers as a result of

registering at one of our Marketing Partner Sites. We support responsible use
of the internet. Our policy is to comply with all known governmental laws and

regulations covering commercial e-mail. If you wish to stop receiving
marketing offers from us <A

href="http://www.9262992677.com/remove.html">Click this link</A> to
remove yourself permanently from our opted-in email list. We will remove your

email within 48 hours.</td>
</tr>

</table>
</div>
</DIV></BODY></HTML>iebxq
mpzdseoxkhqtzztwzkukhko bwzfvvvvi at zdy cvx kvz asrkfsciinxe
mr

Paul Wright

unread,

Jul 28, 2003, 3:20:50 AM7/28/03

to

The following message was received by a defunct address and posted to
news.admin.net-abuse.sightings by an automated script. The address which
received it has not asked to receive the message.

-----------------------------BEGIN SPAM MESSAGE--------------------------------

Return-path: <dyoun...@schahin.com.br>
Envelope-to: REM...@verence.demon.co.uk
Delivery-date: Mon, 28 Jul 2003 08:20:31 +0100

Received: from mail by verence.REMOVED with dcc (Exim 3.36 #1 (Debian))

id 19h2J4-0000Kq-00
for <REM...@verence.demon.co.uk>; Mon, 28 Jul 2003 08:20:31 +0100

Received: from REMOVED by verence.REMOVED with fetchmail (Exim 3.36 #1

(Debian)) id 19h2J4-0000KF-00
for <REM...@verence.demon.co.uk>; Mon, 28 Jul 2003 08:20:30 +0100

Received: from pop3.demon.co.uk
by verence.REMOVED with POP3 (fetchmail-5.9.11)
for REM...@verence.demon.co.uk (multi-drop);

Mon, 28 Jul 2003 08:20:29 +0100 (BST)
Received: from punt-1.mail.demon.net by mailstore for REM...@verence.demon.co.uk
id 1059369737:10:18620:9; Mon, 28 Jul 2003 05:22:17 GMT
Received: from [210.0.146.106] ([210.0.146.106]) by punt-1.mail.demon.net
id aa1127394; 28 Jul 2003 5:22 GMT
Received: from [27.110.72.136] by 194.217.242.34 SMTP id cb4JCoI1ivxkGE for
<REM...@verence.demon.co.uk>; Mon, 28 Jul 2003 06:14:28 +0000
From: "" <dyoun...@schahin.com.br>

Subject: You need to update your computer system

Date: Mon, 28 Jul 03 06:14:28 GMT
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="_BD7FF.F5.90AB5C."
X-Priority: 3
X-MSMail-Priority: Normal
X-DCC-WEiAPG-Metrics: verence 1072; Body=1 Fuz1=1 Fuz2=many

<html>

<head>

</head>
<body bgcolor="#FFFFFF">

</table>
</div>
</DIV></BODY></HTML>aixfysuwfjdym nlc yzshrrlydewjkqk exfccqpb d
ket
ts jiagoahxqx ieumn voo
zp
hkaz hfpom yo