Monday, May 10, 2010

Inbox - this CROOK is active again! Do not click on links - could be virus or phishing

there were quite a few more that I deleted via JB Mail on my server itccommunications.net does not have an email address funkyhairlb@itccommunications.net so we know that this person is a crook behind these emails

Return-Path:
Received: from bl5-178-125.dsl.telepac.pt (bl5-178-125.dsl.telepac.pt [82.154.178.125])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o49Gk5nH016868;
Sun, 9 May 2010 18:46:05 +0200
Received: from [82.154.178.125] (port=9315 helo=VSC)
by exchange01.honeycomb.net with asmtp
id 354CC0-0004D2-25
for ; Sun, 9 May 2010 17:45:21 +0000
Message-ID:
From: "Mario Quintanilla"
To:
Subject: nuevas fotos
Date: Sun, 9 May 2010 17:45:21 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0005_01CAEF97.03B145D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
X-Spam: Not detected
X-Mras: Ok
X-UIDL: &_[!!mmC!!N3;"!AFf!!
Old-X-EsetId: E74D982990713469F84B987D9B2B76
Old-X-EsetId: E74D982990713469F84B987D9B2B76
X-EsetScannerBuild: 7091
.

Hola, te envío fotos nuevas (2-3 de ellos son demasiado franca, pero tú sabes que yo no soy tímido ;-)). Captura: fotos
-------------------------------------------------------------------------------------------------------
Return-Path:
Received: from 178-37-165-20.adsl.inetia.pl (178-37-165-20.adsl.inetia.pl [178.37.165.20])
by mailer.ran.es (8.14.2/8.13.8) with ESMTP id o49IxjPI003175;
Sun, 9 May 2010 20:59:45 +0200
Received: from 178.37.165.20 by xmail.royalglass.com; Sun, 9 May 2010 20:59:34 +0100
Message-ID: <000d01caefa9$c38623a0$6400a8c0@analyzert7888>
From: "Brunilda"
To:
Subject: Fw: Fotos
Date: Sun, 9 May 2010 20:59:34 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CAEFA9.C38623A0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: !oj"!RI~"!j3="!4U"!!
Old-X-EsetId: E74D982990713469F84B987D9B2B76
Old-X-EsetId: E74D982990713469F84B987D9B2B76
X-EsetScannerBuild: 7091
X-EsetId: E74D982990713469F84B987D9B2A70
.

Hola, te envío fotos nuevas (2-3 de ellos son demasiado franca, pero tú sabes que yo no soy tímido ;-)). Captura: fotos

-----------------------------------------------------------------------------------------------

Message-ID: <000d01caf011$0bb286c0$6400a8c0@rehearsalkd2>
From: "Bibiana"
To:
Subject: nuevas fotos
Date: Mon, 10 May 2010 13:18:53 +0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0007_01CAF011.0BB286C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-UIDL: 20h!!]:4"!o%k"!^"M"!
Old-X-EsetId: E74D982990713469F84B987D9B2B78
Old-X-EsetId: E74D982990713469F84B987D9B2B78
X-EsetScannerBuild: 7091
X-EsetId: E74D982990713469F84B987D9B2A70

.

Hola, te envío fotos nuevas (2-3 de ellos son demasiado franca, pero tú sabes que yo no soy tímido ;-)). Captura: fotos

1 comment:

SIMA sl said...

Yes, all those links are exploits that can damage any unprotected computer. It's a sort of Trojan.