Re: NANFA-L-- OT Fwd: Delivery Notification: Delivery has failed

Stott Noble (stottn-in-ncgconsulting.com)
Wed, 27 Apr 2005 23:30:24 -0500

Read all the way to the bottom. This was an attempt to get you to open
an attachment and infect you with a virus. Virus e-mails will often
disguise them selves as Non Delivery Reports so to seem legitimate. It
looks like your ISP stripped the malicious attachment so you were in no
danger. ANy relation to posting to the group is almost ertainly coinicence.

-Stott

Little Shades Creek, Cahaba drainage
B'ham AL

Moontanman-in-aol.com wrote:

> Does anyone have any idea what this message means? I got it when I
> posted to the NANFA-l list. At least I think it was the NANFA list,
> anyway I didn't send anything to the only person listed.
>
> Moon
> ------------------------------------------------------------------------
>
> Subject:
> Delivery Notification: Delivery has failed
> From:
> Internet Mail Delivery <postmaster-in-ms-mss-04.nyroc.rr.com>
> Date:
> Wed, 27 Apr 2005 11:09:29 -0400 (EDT)
> To:
> moontanman-in-aol.com
>
> To:
> moontanman-in-aol.com
>
>
>This report relates to a message you sent with the following header fields:
>
> Return-path: <moontanman-in-aol.com>
> Received: from ims-ms-daemon.ms-mss-04.nyroc.rr.com by ms-mss-04.nyroc.rr.com
> (iPlanet Messaging Server 5.2 HotFix 2.04 (built Feb 8 2005))
> id <0IFM0070823TSQ-in-ms-mss-04.nyroc.rr.com>
> (original mail from moontanman-in-aol.com); Wed, 27 Apr 2005 11:09:29 -0400 (EDT)
> Received: from ms-mta-03 (ms-mta-03-smtp [10.10.4.10])
> by ms-mss-04.nyroc.rr.com
> (iPlanet Messaging Server 5.2 HotFix 2.04 (built Feb 8 2005))
> with ESMTP id <0IFM0024323T2I-in-ms-mss-04.nyroc.rr.com> for
> mike-in-rochester.rr.com; Wed, 27 Apr 2005 11:09:29 -0400 (EDT)
> Received: from nymx03.mgw.rr.com (nymx03.mgw.rr.com [24.92.226.164])
> by ms-mta-03.nyroc.rr.com
> (iPlanet Messaging Server 5.2 HotFix 2.04 (built Feb 8 2005))
> with ESMTP id <0IFM00LXS21ASO-in-ms-mta-03.nyroc.rr.com> for
> mike-in-rochester.rr.com (ORCPT mike-in-rochester.rr.com); Wed,
> 27 Apr 2005 11:07:58 -0400 (EDT)
> Received: from austtx-mx-02.mgw.rr.com (austtx-mx-02.mgw.rr.com [24.93.40.212])
> by nymx03.mgw.rr.com (8.12.10/8.12.8) with ESMTP id j3REvd8L009903 for
> <mike-in-rochester.rr.com>; Wed, 27 Apr 2005 11:09:13 -0400 (EDT)
> Received: from gateway.honeoye.org (HELO aol.com) (66.133.136.150)
> by austtx-mx-02.mgw.rr.com with ESMTP; Wed, 27 Apr 2005 11:07:09 -0400
> Date: Wed, 27 Apr 2005 11:07:01 -0400
> From: moontanman-in-aol.com
> Subject: Status
> To: mike-in-rochester.rr.com
> Message-id: <3kpg5e$efsqkk-in-austtx-mx-02.mgw.rr.com>
> MIME-version: 1.0
> Content-type: multipart/mixed;
> boundary="----=_NextPart_000_0002_6C60A45D.48F39C5F"
> X-Priority: 3
> X-MSMail-priority: Normal
> X-Virus-Scanned: Symantec AntiVirus Scan Engine
> X-Virus-Scan-Result: Repaired 32352 W32.Mytob.AG-in-mm
>
>Your message cannot be delivered to the following recipients:
>
> Recipient address: mike%rochester.rr.com-in-ims-ms-daemon
> Original address: mike-in-rochester.rr.com
> Reason: Over quota
>
>
>
>------------------------------------------------------------------------
>
>Original-recipient: rfc822;mike-in-rochester.rr.com
>Final-recipient: rfc822;mike%rochester.rr.com-in-ims-ms-daemon
>Action: failed
>Status: 5.2.2 (Over quota)
>
>
> ------------------------------------------------------------------------
>
> Subject:
> Status
> From:
> moontanman-in-aol.com
> Date:
> Wed, 27 Apr 2005 11:07:01 -0400
> To:
> mike-in-rochester.rr.com
>
> To:
> mike-in-rochester.rr.com
>
>
>ALERT!!!
>This e-mail in its original form contained one or more attached files that were infected with a virus or worm, or contained another type of security threat.
>
>The following attachments were infected and have been repaired:
>No attachments are in this category.
>
>The following attachments were deleted due to an inability to clean them:
>1. hblgekx.scr: W32.Mytob.AG-in-mm
>
>The Following attachments were not delivered due to inbound mail policy violations:
>No attachments are in this category.
>
>
>Road Runner does not contact the sender of the infected attachment(s) in the event that they were not actually sent from the indicated party.
>
>Please contact the sender directly to alert them of their issue with infected files if you wish to do so.
>
>For more information on Road Runner's virus filtering initiative, visit our Help & Member Services pages-in-http://help.rr.com, or the virus filtering information page directly-in-http://help.rr.com/faqs/e_mgsp.html.
>
>------------ Original message text follows ------------
>
>
>Mail transaction failed. Partial message is available.
>
>
>
>------------------------------------------------------------------------
>
>file attachment: hblgekx.scr
>
>This e-mail in its original form contained one or more attached files that were infected with the W32.Mytob.AG-in-mm virus or worm. They have been removed.
>For more information on Road Runner's virus filtering initiative, visit our Help & Member Services pages-in-http://help.rr.com, or the virus filtering information page directly-in-http://help.rr.com/faqs/e_mgsp.html.
>
/-----------------------------------------------------------------------
/ This is the discussion list of the North American Native Fishes
/ Association (NANFA). Comments made on this list do not necessarily
/ reflect the beliefs or goals of NANFA. For more information about NANFA,
/ visit http://www.nanfa.org Please make sure all posts to nanfa-l are
/ consistent with the guidelines as per
/ http://www.nanfa.org/guidelines.shtml To subscribe, unsubscribe, or get
/ help, visit the NANFA email list home page and archive at
/ http://www.nanfa.org/email.shtml