Obviously, I deleted all entries with my email and domain with
------------------------
I have 3 headers which are exactly like the first 2, and the 3rd one I recieved while I was sleeping.
Return-Path: <>
Delivered-To: ----------------------------------
Received: (qmail 20043 invoked from network); 28 Apr 2004 14:20:12 -0000
Received: from cpe002078d1af34-cm014490002869.cpe.net.cable.rogers.com (HELO --------------------) ([24.102.138.211]) (envelope-sender <>)
by mail-4.---------------------------- (qmail-ldap-1.03) with SMTP
for <--------------------------->; 28 Apr 2004 14:20:12 -0000
MIME-Version: 1.0
Message-Id: 408FBD45.000003.17633@VAIO
Date: Wed, 28 Apr 2004 10:18:45 -0400 (Eastern Daylight Time)
Content-Type: Multipart/report;
report-type="delivery-status";
boundary="------------Boundary-00=_93XVG6G0000000000000"
From: MAILER-DAEMON@------------------- (Mail Delivery Subsystem)
Message-Id: E1BIo1v-0002VL-H6@mx1.-----------------------
Auto-Submitted: auto-generated (failure)
To: -------------------------------------------
Subject: Undelivered mail: User unknown
Along with this first one a .txt was attatched. This is what it said:
Reporting-MTA: dns; mx1.------------------------------
Received-From-MTA: dns;
Arrival-Date: Tue, 27 Apr 2004 14:51:26 -0700
Final-Recipient: rfc822; <maxine@hucardguys.com>
X-Actual-Recipient: rfc822;
maxine@hucardguys.com
Action: failed
Status: 5.1.1
Last-Attempt-Date: Tue, 27 Apr 2004 14:51:26 -0700
Diagnostic-Code: smtp; 550 <maxine@hucardguys.com>: User unknown in virtual mailbox table
Return-Path: <>
Delivered-To: -------------------------------
Received: (qmail 7356 invoked from network); 28 Apr 2004 11:57:56 -0000
Received: from mail-3.------------------------ ([63.67.120.3]) (envelope-sender <>)
by mail-4.--------------------------(qmail-ldap-1.03) with QMQP
for <>; 28 Apr 2004 11:57:56 -0000
Delivered-To: CLUSTERHOST mail-3.----------------------- --------------------------
Received: (qmail 23299 invoked from network); 28 Apr 2004 11:57:57 -0000
Received: from 69-28-195-132.waterhosting.com (HELO server1.waterhosting.com) ([69.28.195.132]) (envelope-sender <>)
by mail-3.------------------------- (qmail-ldap-1.03) with SMTP
for ------------------------------; 28 Apr 2004 11:57:56 -0000
Received: from mailnull by server1.waterhosting.com with local (Exim 4.24)
id 1BInhM-0002AD-5x
for -----------------------------; Wed, 28 Apr 2004 07:57:56 -0400
X-Failed-Recipients:
maxine@hucardguys.com
Auto-Submitted: auto-generated
From: Mail Delivery System
Mailer-Daemon@server1.waterhosting.com
To: -----------------------------------
Subject: Mail delivery failed: returning message to sender
Message-Id:
E1BInhM-0002AD-5x@server1.waterhosting.com
Date: Wed, 28 Apr 2004 07:57:56 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.waterhosting.com
X-AntiAbuse: Original Domain - ---------------------------
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain -
Return-Path:
trickofmind@earthlink.net
Delivered-To: -------------------------------
Received: (qmail 9162 invoked from network); 28 Apr 2004 17:21:45 -0000
Received: from unknown (HELO ChrissyLewgood.org) ([207.195.108.66]) (envelope-sender <trickofmind@earthlink.net>)
by mail-4.--------------------------- (qmail-ldap-1.03) with SMTP
for ------------------------------; 28 Apr 2004 17:21:45 -0000
Date: Wed, 28 Apr 2004 11:21:42 -0600
To: "-----------" ------------------------------------
From: "Trickofmind"
trickofmind@earthlink.net
Subject: Fax Message Received
Message-ID: <ikdnmdknuzqkpozvyb@-----------------------------
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------iuoyozfzjjanhzpfjugi"
This was a message sent with one of the Failures:
This message was created automatically by mail delivery software.
A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:
maxine@hucardguys.com
This message has been rejected because it has
a potentially executable attachment "Joke.vbs"
This form of attachment has been used by
recent viruses or other malware.
If you meant to send this file then please
package it up as a zip file and resend it.
------ This is a copy of the message, including all the headers. ------
Return-path: <----------------------------------->
Received: from [24.64.178.237] (helo=bill.org)
by server1.waterhosting.com with smtp (Exim 4.24)
id 1BInhJ-0002A8-Io
for
maxine@hucardguys.com; Wed, 28 Apr 2004 07:57:53 -0400
Date: Wed, 28 Apr 2004 05:54:57 -0700
To: "Maxine" <maxine@hucardguys.com>
From: "------" <--------------------------->
Subject: Re: Thank you!
Message-ID: <cbhszpucazwbieuibwt@hucardguys.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------mrbcympdjopcrugpcusy"
----------mrbcympdjopcrugpcusy
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: 7bit
html body
br
body html
----------mrbcympdjopcrugpcusy
Content-Type: application/octet-stream; name="Joke.vbs"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Joke.vbs"