Over the past 24 hours or so, I'm getting a LOT of emails of various
types that all have an 80K file attached to it. e.g.:
Return-Path: <[EMAIL PROTECTED]>
Received: from jywwvxqt.com (67.111.167.138.ptr.us.xo.net
[67.111.167.138])
by ssih.com (8.11.0/8.11.0) with SMTP id iANGddM15027
for <[EMAIL PROTECTED]>; Tue, 23 Nov 2004 11:39:40 -0500
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Tue, 23 Nov 2004 15:52:41 UTC
Subject: FwD: Your mail password <KEY:4886>
Importance: Normal
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="====5a31217b3c.e1"
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on ssih.com
X-Spam-Level: ****
X-Spam-Status: No, score=4.1 required=5.0
tests=BAYES_50,DNS_FROM_RFC_POST,
FORGED_HOTMAIL_RCVD2,INVALID_DATE,MISSING_MIMEOLE,NO_REAL_NAME,
PRIORITY_NO_NAME autolearn=no version=3.0.1
Parts/Attachments:
1 Shown 4 lines Text
2 58 KB Application
----------------------------------------
Your password was changed successfully!
++++++ User-Service: http://www.hotmail.com
++++++ MailTo: [EMAIL PROTECTED]
[ Part 2, Application/OCTET-STREAM (Name: "hotmail.zip") 78KB. ]
[ Cannot display this part. Press "V" then "S" to save in a file.
Some of the files are obvious spam like this, some appear to be messages
that are from system administrators saying that the attached file was
scanned for viruses and none were found, etc. The files are always
named differently.
Is anyone else seeing this, and is there a rule set that I could put
into place to take care of it?
--pat--
--
Pat Traynor
[EMAIL PROTECTED]
