Origin of the mails from virus senders

("Pas vu, pas pris; pris pendu" he he he)

3

Détail :

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Tue, 13 Jul 2004 11:34:48 +0200

Received: from willum.dreamhost.com ([66.33.197.200]) by 192.168.1.101 with

trend_isnt_name_B; Tue, 06 Jul 2004 11:33:21 +0200

Received: from paris.magic.fr (paris.magic.fr [62.210.190.2])by willum.dream

host.com (Postfix) with ESMTP id EE1652BC0Ffor <izz@inter-zone.org>; Tue, 1

3 Jul 2004 02:32:39 -0700 (PDT)

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by paris.magic.

fr (8.11.6/8.11.6) with ESMTP id i6D9WHL06635for <izz@inter-zone.org>; Tue,

13 Jul 2004 11:32:18 +0200

Received: from panama.magic.fr (panama.magic.fr [62.210.139.85])by bali.magi

c.fr (8.11.6/8.11.2) with SMTP id i6D9WDH22105for <izz@inter-zone.org>; Tue

, 13 Jul 2004 11:32:17 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by panama.magic.fr via csma

p id 464b72f2_d4af_11d8_8d57_0002b3da0f62_20975;Tue, 13 Jul 2004 11:30:27 +

0200 (CEST)

Received: from loisir.net (171.39.63.81.cust.bluewin.ch [81.63.39.171])by am

sterdam.magic.fr (8.11.7/8.11.2) with ESMTP id i6D9UM328133for <activisions

av@loisir.net>; Tue, 13 Jul 2004 11:30:22 +0200 (CEST)

Message-Id: <200407130930.i6D9UM328133@amsterdam.magic.fr>

From: izz@inter-zone.org

To: activisionsav@loisir.net

Subject: [Magic OnLine] Suppression du Virus: Re: Your music

Date: Tue, 13 Jul 2004 11:30:27 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0013_0000032

Source:

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Tue, 13 Jul 2004 11:34:48 +0200

Received: from willum.dreamhost.com ([66.33.197.200]) by 192.168.1.101 with

trend_isnt_name_B; Tue, 06 Jul 2004 11:33:21 +0200

Received: from paris.magic.fr (paris.magic.fr [62.210.190.2])by willum.dream

host.com (Postfix) with ESMTP id EE1652BC0Ffor <izz@inter-zone.org>; Tue, 1

3 Jul 2004 02:32:39 -0700 (PDT)

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by paris.magic.

fr (8.11.6/8.11.6) with ESMTP id i6D9WHL06635for <izz@inter-zone.org>; Tue,

13 Jul 2004 11:32:18 +0200

Received: from panama.magic.fr (panama.magic.fr [62.210.139.85])by bali.magi

c.fr (8.11.6/8.11.2) with SMTP id i6D9WDH22105for <izz@inter-zone.org>; Tue

, 13 Jul 2004 11:32:17 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by panama.magic.fr via csma

p id 464b72f2_d4af_11d8_8d57_0002b3da0f62_20975;Tue, 13 Jul 2004 11:30:27 +

0200 (CEST)

Received: from loisir.net (171.39.63.81.cust.bluewin.ch [81.63.39.171])by am

sterdam.magic.fr (8.11.7/8.11.2) with ESMTP id i6D9UM328133for <activisions

av@loisir.net>; Tue, 13 Jul 2004 11:30:22 +0200 (CEST)

Message-Id: <200407130930.i6D9UM328133@amsterdam.magic.fr>

From: izz@inter-zone.org

To: activisionsav@loisir.net

Subject: [Magic OnLine] Suppression du Virus: Re: Your music

Date: Tue, 13 Jul 2004 11:30:27 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0013_0000032F.00000BCD"

X-Priority: 3

X-MSMail-Priority: Normal

X-NAI-Spam-Score: 0.1

X-NAI-Spam-Rules: 4 Rules triggeredPRIORITY_NO_NAME=2.5, BAYES_00=-2.5, MICR

OSOFT_EXECUTABLE=0.1, MISSING_MIMEOLE=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:1.0644 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_0013_0000032F.00000BCD

Content-Type: text/plain;

charset="Windows-1252"

Content-Transfer-Encoding: 7bit

 

Please read the attached file.

 

------=_NextPart_000_0013_0000032F.00000BCD

Content-Disposition: attachment

Content-Type: Text/HTML;

name="mp3music.pif.htm"

Content-Transfer-Encoding: 7bit

X-NAI-WebShielde1000-mimepp: Attachment removed

 

<HTML><HEAD>

<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">

<TITLE>Alerte virale / Magic OnLine</TITLE>

</HEAD>

<BODY text=#000000 vLink=#004080 link=#004080>

<DIV><FONT face=Tahoma size=2><BR></FONT>&nbsp;</DIV>

<TABLE cellSpacing=0 cellPadding=0 width=640 border=0>

<TBODY>

<TR>

<TD width=205><A href="http://www.magic.fr" target=_blank>

<IMG height=52 src="http://www.magic.fr/images/logo200.gif" width=200 border=0 NOSEND="1"></A>

</TD>

<TD vAlign=bottom width=435><FONT face="Verdana, Arial, Helvetica" color=#666666 size=2>

<B>La garantie d'un leader de l'Internet pour l'entreprise</B></FONT> </TD></TR></TBODY></TABLE>

<P style="MARGIN-TOP: 8px; MARGIN-BOTTOM: 0px">

<TABLE cellSpacing=0 cellPadding=1 width=640 bgColor=#cc0000 border=0>

<TBODY>

<TR>

<TD bgColor=#000000><FONT face="Arial, Helvetica" color=#ffffff

size=2>&nbsp; </FONT></TD>

<TD align=middle><FONT face="Arial, Helvetica" color=#ffffff

size=3>&nbsp;<B>Alerte Virale: Votre message a &eacute;t&eacute;

intercept&eacute; car il contient un virus </B> </FONT></TD>

<TD align=right bgColor=#000000><FONT face="Arial, Helvetica"

color=#ffffff size=2>&nbsp; </FONT></TD></TR></TBODY></TABLE>

<P>

<TABLE cellSpacing=0 cellPadding=1 width=640 border=0>

<TBODY>

<TR>

<TD><FONT face="Verdana, Arial, Helvetica" size=2>

Il est cependant possible que vous ne soyez pas l'&eacute;metteur du message car

certains virus modifient l'adresse email de l'exp&eacute;diteur.

<P>

Des informations compl&eacute;mentaires &agrave; jour sont disponibles sur notre site

<A href="http://www.magic.fr">http://www.magic.fr</A>

<P>

<HR color=#cccccc SIZE=1>

</FONT></TD></TR></TBODY>

</TABLE></P>

</BODY></HTML>

 

------=_NextPart_000_0013_0000032F.00000BCD--

===================================================================================

Détail:

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sun, 18 Jul 2004 09:19:15 +0200

Received: from ludo.dreamhost.com ([66.33.197.214]) by 192.168.1.101 with tr

end_isnt_name_B; Sat, 10 Jul 2004 09:17:35 +0200

Received: from oslo.magic.fr (oslo.magic.fr [195.154.193.55])by ludo.dreamho

st.com (Postfix) with ESMTP id D668F27EC3for <izz@inter-zone.org>; Sun, 18

Jul 2004 00:17:03 -0700 (PDT)

Received: from dodoma.magic.fr (dodoma.magic.fr [195.154.193.35])by oslo.mag

ic.fr (8.12.10/8.12.10) with ESMTP id i6I7H2Dq028835for <izz@inter-zone.org

>; Sun, 18 Jul 2004 09:17:03 +0200

Received: from asuncion.magic.fr (asuncion.magic.fr [195.154.233.103])by dod

oma.magic.fr (8.11.6/8.11.6) with SMTP id i6I7H2p25483for <izz@inter-zone.o

rg>; Sun, 18 Jul 2004 09:17:02 +0200

Received: from amsterdam.magic.fr(62.210.158.47) by asuncion.magic.fr via cs

map id 4248f0b0_d88a_11d8_8535_0002b3da0fe2_10616;Sun, 18 Jul 2004 09:15:33

+0200 (CEST)

Received: from magic.fr (m214.net81-67-131.noos.fr [81.67.131.214])by amster

dam.magic.fr (8.11.7/8.11.2) with ESMTP id i6I7FRT05471for <sellier@magic.f

r>; Sun, 18 Jul 2004 09:15:28 +0200 (CEST)

Message-Id: <200407180715.i6I7FRT05471@amsterdam.magic.fr>

From: izz@inter-zone.org

To: sellier@magic.fr

Subject: [Magic OnLine] Suppression du Virus: Hello

Date: Sun, 18 Jul 2004 09:15:30 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0004_00004402.000070A4"

X-Priority: 1

X-MSMail-Priority: High

X-NAI-Spam-Score: 5.9

X-NAI-Spam-Level: *****

X-NAI-Spam-Rules: 6 Rules triggeredSUB_HELLO=4.6, PRIORITY_NO_NAME=2.5, BAYE

S_00=-2.5, X_PRIORITY_HIGH=0.7, X_MSMAIL_PRIORITY_HIGH=0.5, MISSING_MIMEOLE

=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:0.7061 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

Source:

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sun, 18 Jul 2004 09:19:15 +0200

Received: from ludo.dreamhost.com ([66.33.197.214]) by 192.168.1.101 with tr

end_isnt_name_B; Sat, 10 Jul 2004 09:17:35 +0200

Received: from oslo.magic.fr (oslo.magic.fr [195.154.193.55])by ludo.dreamho

st.com (Postfix) with ESMTP id D668F27EC3for <izz@inter-zone.org>; Sun, 18

Jul 2004 00:17:03 -0700 (PDT)

Received: from dodoma.magic.fr (dodoma.magic.fr [195.154.193.35])by oslo.mag

ic.fr (8.12.10/8.12.10) with ESMTP id i6I7H2Dq028835for <izz@inter-zone.org

>; Sun, 18 Jul 2004 09:17:03 +0200

Received: from asuncion.magic.fr (asuncion.magic.fr [195.154.233.103])by dod

oma.magic.fr (8.11.6/8.11.6) with SMTP id i6I7H2p25483for <izz@inter-zone.o

rg>; Sun, 18 Jul 2004 09:17:02 +0200

Received: from amsterdam.magic.fr(62.210.158.47) by asuncion.magic.fr via cs

map id 4248f0b0_d88a_11d8_8535_0002b3da0fe2_10616;Sun, 18 Jul 2004 09:15:33

+0200 (CEST)

Received: from magic.fr (m214.net81-67-131.noos.fr [81.67.131.214])by amster

dam.magic.fr (8.11.7/8.11.2) with ESMTP id i6I7FRT05471for <sellier@magic.f

r>; Sun, 18 Jul 2004 09:15:28 +0200 (CEST)

Message-Id: <200407180715.i6I7FRT05471@amsterdam.magic.fr>

From: izz@inter-zone.org

To: sellier@magic.fr

Subject: [Magic OnLine] Suppression du Virus: Hello

Date: Sun, 18 Jul 2004 09:15:30 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0004_00004402.000070A4"

X-Priority: 1

X-MSMail-Priority: High

X-NAI-Spam-Score: 5.9

X-NAI-Spam-Level: *****

X-NAI-Spam-Rules: 6 Rules triggeredSUB_HELLO=4.6, PRIORITY_NO_NAME=2.5, BAYE

S_00=-2.5, X_PRIORITY_HIGH=0.7, X_MSMAIL_PRIORITY_HIGH=0.5, MISSING_MIMEOLE

=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:0.7061 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_0004_00004402.000070A4

Content-Type: text/plain;

charset="Windows-1252"

Content-Transfer-Encoding: 7bit

 

Important data!

 

 

------=_NextPart_000_0004_00004402.000070A4

Content-Disposition: attachment

Content-Type: Text/HTML;

name="Data.zip.htm"

Content-Transfer-Encoding: 7bit

X-NAI-WebShielde1000-mimepp: Attachment removed

 

<HTML><HEAD>

<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">

<TITLE>Alerte virale / Magic OnLine</TITLE>

</HEAD>

<BODY text=#000000 vLink=#004080 link=#004080>

<DIV><FONT face=Tahoma size=2><BR></FONT>&nbsp;</DIV>

<TABLE cellSpacing=0 cellPadding=0 width=640 border=0>

<TBODY>

<TR>

<TD width=205><A href="http://www.magic.fr" target=_blank>

<IMG height=52 src="http://www.magic.fr/images/logo200.gif" width=200 border=0 NOSEND="1"></A>

</TD>

<TD vAlign=bottom width=435><FONT face="Verdana, Arial, Helvetica" color=#666666 size=2>

<B>La garantie d'un leader de l'Internet pour l'entreprise</B></FONT> </TD></TR></TBODY></TABLE>

<P style="MARGIN-TOP: 8px; MARGIN-BOTTOM: 0px">

<TABLE cellSpacing=0 cellPadding=1 width=640 bgColor=#cc0000 border=0>

<TBODY>

<TR>

<TD bgColor=#000000><FONT face="Arial, Helvetica" color=#ffffff

size=2>&nbsp; </FONT></TD>

<TD align=middle><FONT face="Arial, Helvetica" color=#ffffff

size=3>&nbsp;<B>Alerte Virale: Votre message a &eacute;t&eacute;

intercept&eacute; car il contient un virus </B> </FONT></TD>

<TD align=right bgColor=#000000><FONT face="Arial, Helvetica"

color=#ffffff size=2>&nbsp; </FONT></TD></TR></TBODY></TABLE>

<P>

<TABLE cellSpacing=0 cellPadding=1 width=640 border=0>

<TBODY>

<TR>

<TD><FONT face="Verdana, Arial, Helvetica" size=2>

Il est cependant possible que vous ne soyez pas l'&eacute;metteur du message car

certains virus modifient l'adresse email de l'exp&eacute;diteur.

<P>

Des informations compl&eacute;mentaires &agrave; jour sont disponibles sur notre site

<A href="http://www.magic.fr">http://www.magic.fr</A>

<P>

<HR color=#cccccc SIZE=1>

</FONT></TD></TR></TBODY>

</TABLE></P>

</BODY></HTML>

 

------=_NextPart_000_0004_00004402.000070A4--

==============================================================================================

Détail :

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sat, 17 Jul 2004 14:20:38 +0200

Received: from oslo.magic.fr ([195.154.193.55]) by 192.168.1.101 with trend_

isnt_name_B; Fri, 09 Jul 2004 14:19:00 +0200

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by oslo.magic.f

r (8.12.10/8.12.10) with ESMTP id i6HCISDq004206for <baudron@interpc.fr>; S

at, 17 Jul 2004 14:18:28 +0200

Received: from asuncion.magic.fr (asuncion.magic.fr [195.154.233.103])by bal

i.magic.fr (8.11.6/8.11.2) with SMTP id i6HCIR618895for <baudron@interpc.fr

>; Sat, 17 Jul 2004 14:18:27 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by asuncion.magic.fr via cs

map id 5dde7d80_d7eb_11d8_99ed_0002b3da0fe2_29960;Sat, 17 Jul 2004 14:18:09

+0200 (CEST)

Received: from magic.fr (AAubervilliers-107-1-3-56.w81-51.abo.wanadoo.fr [81

.51.67.56])by amsterdam.magic.fr (8.11.7/8.11.2) with ESMTP id i6HCHjW22441

for < auboin@magic.fr >; Sat, 17 Jul 2004 14:17:45 +0200 (CEST)

Message-Id: <200407171217.i6HCHjW22441@amsterdam.magic.fr>

From: baudron@interpc.fr

To: auboin@magic.fr

Subject: [Magic OnLine] Suppression du Virus: stolen

Date: Sat, 17 Jul 2004 14:10:22 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0000_00006311.000028BF"

X-Priority: 3

X-MSMail-Priority: Normal

X-NAI-Spam-Score: 0.1

X-NAI-Spam-Rules: 4 Rules triggeredPRIORITY_NO_NAME=2.5, BAYES_00=-2.5, MICR

OSOFT_EXECUTABLE=0.1, MISSING_MIMEOLE=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:1.0644 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

Source:

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sat, 17 Jul 2004 14:20:38 +0200

Received: from oslo.magic.fr ([195.154.193.55]) by 192.168.1.101 with trend_

isnt_name_B; Fri, 09 Jul 2004 14:19:00 +0200

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by oslo.magic.f

r (8.12.10/8.12.10) with ESMTP id i6HCISDq004206for <baudron@interpc.fr>; S

at, 17 Jul 2004 14:18:28 +0200

Received: from asuncion.magic.fr (asuncion.magic.fr [195.154.233.103])by bal

i.magic.fr (8.11.6/8.11.2) with SMTP id i6HCIR618895for <baudron@interpc.fr

>; Sat, 17 Jul 2004 14:18:27 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by asuncion.magic.fr via cs

map id 5dde7d80_d7eb_11d8_99ed_0002b3da0fe2_29960;Sat, 17 Jul 2004 14:18:09

+0200 (CEST)

Received: from magic.fr (AAubervilliers-107-1-3-56.w81-51.abo.wanadoo.fr [81

.51.67.56])by amsterdam.magic.fr (8.11.7/8.11.2) with ESMTP id i6HCHjW22441

for <auboin@magic.fr>; Sat, 17 Jul 2004 14:17:45 +0200 (CEST)

Message-Id: <200407171217.i6HCHjW22441@amsterdam.magic.fr>

From: baudron@interpc.fr

To: auboin@magic.fr

Subject: [Magic OnLine] Suppression du Virus: stolen

Date: Sat, 17 Jul 2004 14:10:22 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0000_00006311.000028BF"

X-Priority: 3

X-MSMail-Priority: Normal

X-NAI-Spam-Score: 0.1

X-NAI-Spam-Rules: 4 Rules triggeredPRIORITY_NO_NAME=2.5, BAYES_00=-2.5, MICR

OSOFT_EXECUTABLE=0.1, MISSING_MIMEOLE=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:1.0644 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_0000_00006311.000028BF

Content-Type: text/plain;

charset="Windows-1252"

Content-Transfer-Encoding: 7bit

 

bob the builder

 

------=_NextPart_000_0000_00006311.000028BF

Content-Disposition: attachment

Content-Type: Text/HTML;

name="mails_schock.txt.com.htm"

Content-Transfer-Encoding: 7bit

X-NAI-WebShielde1000-mimepp: Attachment removed

 

<HTML><HEAD>

<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">

<TITLE>Alerte virale / Magic OnLine</TITLE>

</HEAD>

<BODY text=#000000 vLink=#004080 link=#004080>

<DIV><FONT face=Tahoma size=2><BR></FONT>&nbsp;</DIV>

<TABLE cellSpacing=0 cellPadding=0 width=640 border=0>

<TBODY>

<TR>

<TD width=205><A href="http://www.magic.fr" target=_blank>

<IMG height=52 src="http://www.magic.fr/images/logo200.gif" width=200 border=0 NOSEND="1"></A>

</TD>

<TD vAlign=bottom width=435><FONT face="Verdana, Arial, Helvetica" color=#666666 size=2>

<B>La garantie d'un leader de l'Internet pour l'entreprise</B></FONT> </TD></TR></TBODY></TABLE>

<P style="MARGIN-TOP: 8px; MARGIN-BOTTOM: 0px">

<TABLE cellSpacing=0 cellPadding=1 width=640 bgColor=#cc0000 border=0>

<TBODY>

<TR>

<TD bgColor=#000000><FONT face="Arial, Helvetica" color=#ffffff

size=2>&nbsp; </FONT></TD>

<TD align=middle><FONT face="Arial, Helvetica" color=#ffffff

size=3>&nbsp;<B>Alerte Virale: Votre message a &eacute;t&eacute;

intercept&eacute; car il contient un virus </B> </FONT></TD>

<TD align=right bgColor=#000000><FONT face="Arial, Helvetica"

color=#ffffff size=2>&nbsp; </FONT></TD></TR></TBODY></TABLE>

<P>

<TABLE cellSpacing=0 cellPadding=1 width=640 border=0>

<TBODY>

<TR>

<TD><FONT face="Verdana, Arial, Helvetica" size=2>

Il est cependant possible que vous ne soyez pas l'&eacute;metteur du message car

certains virus modifient l'adresse email de l'exp&eacute;diteur.

<P>

Des informations compl&eacute;mentaires &agrave; jour sont disponibles sur notre site

<A href="http://www.magic.fr"> http://www.magic.fr </A>

<P>

<HR color=#cccccc SIZE=1>

</FONT></TD></TR></TBODY>

</TABLE></P>

</BODY></HTML>

 

------=_NextPart_000_0000_00006311.000028BF--

======================================================================================

This one using Sazeli Jalal's email :

Details

 

Return-Path: <sazelijalal@hotmail.com>

Delivered-To: online.fr-academie23@free.fr

Received: (qmail 30135 invoked from network); 30 Jul 2004 12:38:55 -0000

Received: from alagny-151-1-1-69.w82-127.abo.wanadoo.fr (HELO free.fr) (82.127.20.69)

by mrelay2-1.free.fr with SMTP; 30 Jul 2004 12:38:55 -0000

From: sazelijalal@hotmail.com

To: academie23@free.fr

Subject: Re: your document

Date: Fri, 30 Jul 2004 14:39:17 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0016----=_NextPart_000_0016"

X-Priority: 3

X-MSMail-Priority: Normal

 

Source:

Return-Path: <sazelijalal@hotmail.com>

Delivered-To: online.fr-academie23@free.fr

Received: (qmail 30135 invoked from network); 30 Jul 2004 12:38:55 -0000

Received: from alagny-151-1-1-69.w82-127.abo.wanadoo.fr (HELO free.fr) (82.127.20.69)

by mrelay2-1.free.fr with SMTP; 30 Jul 2004 12:38:55 -0000

From: sazelijalal@hotmail.com

To: academie23@free.fr

Subject: Re: your document

Date: Fri, 30 Jul 2004 14:39:17 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0016----=_NextPart_000_0016"

X-Priority: 3

X-MSMail-Priority: Normal

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_0016----=_NextPart_000_0016

Content-Type: text/plain;

charset="Windows-1252"

Content-Transfer-Encoding: 7bit

See the file.

------=_NextPart_000_0016----=_NextPart_000_0016--

=======================================================================

Details :

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sat, 31 Jul 2004 15:54:41 +0200

Received: from ludo.dreamhost.com ([66.33.197.214]) by 192.168.1.101 with tr

end_isnt_name_B; Sat, 31 Jul 2004 15:52:23 +0200

Received: from paris.magic.fr (paris.magic.fr [62.210.190.2])by ludo.dreamho

st.com (Postfix) with ESMTP id 76350439E1for <izz@inter-zone.org>; Sat, 31

Jul 2004 06:52:21 -0700 (PDT)

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by paris.magic.

fr (8.11.6/8.11.6) with ESMTP id i6VDqGL25528for <izz@inter-zone.org>; Sat,

31 Jul 2004 15:52:17 +0200

Received: from panama.magic.fr (panama.magic.fr [62.210.139.85])by bali.magi

c.fr (8.11.6/8.11.2) with SMTP id i6VDqHM03220for <izz@inter-zone.org>; Sat

, 31 Jul 2004 15:52:17 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by panama.magic.fr via csma

p id 63b1b7e6_e2f8_11d8_9f56_0002b3da0f62_4965;Sat, 31 Jul 2004 15:49:05 +0

200 (CEST)

Received: from magic.fr (m214.net81-67-131.noos.fr [81.67.131.214])by amster

dam.magic.fr (8.11.7/8.11.2) with ESMTP id i6VDmw115443for < www.sellier@magic.fr >; Sat, 31 Jul 2004 15:48:58 +0200 (CEST)

Message-Id: <200407311348.i6VDmw115443@amsterdam.magic.fr>

From: izz@inter-zone.org

To: www.sellier@magic.fr

Subject: [Magic OnLine] Suppression du Virus: Important

Date: Sat, 31 Jul 2004 15:48:59 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_00005DFB.000025FC"

X-Priority: 1

X-MSMail-Priority: High

X-NAI-Spam-Score: -1.7

X-NAI-Spam-Rules: 5 Rules triggeredBAYES_00=-2.5, X_PRIORITY_HIGH=0.5, X_MSM

AIL_PRIORITY_HIGH=0.3, PRIORITY_NO_NAME=0, MISSING_MIMEOLE=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:0.7061 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

Source:

Return-Path: <>

Received: from interscan1 ([172.20.30.240]) by MAIL2002.interpc.fr

(Post.Office MTA v3.5.3 release 223 ID# 638-71108U3500L350S0V35)

with ESMTP id fr for <baudron@interpc.fr>;

Sat, 31 Jul 2004 15:54:41 +0200

Received: from ludo.dreamhost.com ([66.33.197.214]) by 192.168.1.101 with tr

end_isnt_name_B; Sat, 31 Jul 2004 15:52:23 +0200

Received: from paris.magic.fr (paris.magic.fr [62.210.190.2])by ludo.dreamho

st.com (Postfix) with ESMTP id 76350439E1for <izz@inter-zone.org>; Sat, 31

Jul 2004 06:52:21 -0700 (PDT)

Received: from bali.magic.fr (bali.magic.fr [195.154.193.38])by paris.magic.

fr (8.11.6/8.11.6) with ESMTP id i6VDqGL25528for <izz@inter-zone.org>; Sat,

31 Jul 2004 15:52:17 +0200

Received: from panama.magic.fr (panama.magic.fr [62.210.139.85])by bali.magi

c.fr (8.11.6/8.11.2) with SMTP id i6VDqHM03220for <izz@inter-zone.org>; Sat

, 31 Jul 2004 15:52:17 +0200 (CEST)

Received: from amsterdam.magic.fr(62.210.158.47) by panama.magic.fr via csma

p id 63b1b7e6_e2f8_11d8_9f56_0002b3da0f62_4965;Sat, 31 Jul 2004 15:49:05 +0

200 (CEST)

Received: from magic.fr (m214.net81-67-131.noos.fr [81.67.131.214])by amster

dam.magic.fr (8.11.7/8.11.2) with ESMTP id i6VDmw115443for <www.sellier@mag

ic.fr>; Sat, 31 Jul 2004 15:48:58 +0200 (CEST)

Message-Id: <200407311348.i6VDmw115443@amsterdam.magic.fr>

From: izz@inter-zone.org

To: www.sellier@magic.fr

Subject: [Magic OnLine] Suppression du Virus: Important

Date: Sat, 31 Jul 2004 15:48:59 +0200

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_00005DFB.000025FC"

X-Priority: 1

X-MSMail-Priority: High

X-NAI-Spam-Score: -1.7

X-NAI-Spam-Rules: 5 Rules triggeredBAYES_00=-2.5, X_PRIORITY_HIGH=0.5, X_MSM

AIL_PRIORITY_HIGH=0.3, PRIORITY_NO_NAME=0, MISSING_MIMEOLE=0

X-imss-version: 2.0

X-imss-result: Passed

X-imss-scores: Clean:0.7061 C:20 M:1 S:5 R:5

X-imss-settings: Baseline:1 C:1 M:1 S:1 R:1 (0.0000 0.0000)

 

This is a multi-part message in MIME format.

 

------=_NextPart_000_0012_00005DFB.000025FC

Content-Type: text/plain;

charset="Windows-1252"

Content-Transfer-Encoding: 7bit

 

Important textfile!

 

 

------=_NextPart_000_0012_00005DFB.000025FC

Content-Disposition: attachment

Content-Type: Text/HTML;

name="Textfile.zip.htm"

Content-Transfer-Encoding: 7bit

X-NAI-WebShielde1000-mimepp: Attachment removed

 

<HTML><HEAD>

<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">

<TITLE>Alerte virale / Magic OnLine</TITLE>

</HEAD>

<BODY text=#000000 vLink=#004080 link=#004080>

<DIV><FONT face=Tahoma size=2><BR></FONT>&nbsp;</DIV>

<TABLE cellSpacing=0 cellPadding=0 width=640 border=0>

<TBODY>

<TR>

<TD width=205><A href="http://www.magic.fr" target=_blank>

<IMG height=52 src="http://www.magic.fr/images/logo200.gif" width=200 border=0 NOSEND="1"></A>

</TD>

<TD vAlign=bottom width=435><FONT face="Verdana, Arial, Helvetica" color=#666666 size=2>

<B>La garantie d'un leader de l'Internet pour l'entreprise</B></FONT> </TD></TR></TBODY></TABLE>

<P style="MARGIN-TOP: 8px; MARGIN-BOTTOM: 0px">

<TABLE cellSpacing=0 cellPadding=1 width=640 bgColor=#cc0000 border=0>

<TBODY>

<TR>

<TD bgColor=#000000><FONT face="Arial, Helvetica" color=#ffffff

size=2>&nbsp; </FONT></TD>

<TD align=middle><FONT face="Arial, Helvetica" color=#ffffff

size=3>&nbsp;<B>Alerte Virale: Votre message a &eacute;t&eacute;

intercept&eacute; car il contient un virus </B> </FONT></TD>

<TD align=right bgColor=#000000><FONT face="Arial, Helvetica"

color=#ffffff size=2>&nbsp; </FONT></TD></TR></TBODY></TABLE>

<P>

<TABLE cellSpacing=0 cellPadding=1 width=640 border=0>

<TBODY>

<TR>

<TD><FONT face="Verdana, Arial, Helvetica" size=2>

Il est cependant possible que vous ne soyez pas l'&eacute;metteur du message car

certains virus modifient l'adresse email de l'exp&eacute;diteur.

<P>

Des informations compl&eacute;mentaires &agrave; jour sont disponibles sur notre site

<A href="http://www.magic.fr">http://www.magic.fr</A>

<P>

<HR color=#cccccc SIZE=1>

</FONT></TD></TR></TBODY>

</TABLE></P>

</BODY></HTML>

 

------=_NextPart_000_0012_00005DFB.000025FC--

================================================================================

suite

The Western Lands - Interzone Academy Interzone Creations -Interzone Library Reporters-Rédacteurs d'Interzone - Académie 23