noreply@paypal.com

[Red Squirrel]

A message coming from noreply@paypal.com titled "thank you!" is a virus, I just got it and it's pretty obvious but though I'd post anyway for others to know!

It's a WORM_NETSKY.P for everyone's information.


The IP does not even match with paypal's servers, which is the easiest way to found it it does not really come from paypal.

Return-Path: <noreply@paypal.com>
Received: [noreply@paypal.com]
Message-Id: <200408311612.i7VGC4wF013691@mailserver.icetekshq.ath.cx>
Envelope-to: webmaster@iceteks.com
Delivery-date: Mon, 30 Aug 2004 22:40:04 -0500
Received: from iceteks.com [67.15.0.28]
by localhost with POP3 (fetchmail-5.9.0)
for email_webmaster@localhost (single-drop); Tue, 31 Aug 2004 12:12:16 -0400 (EDT)
Received: from [63.198.207.192] (helo=iceteks.com)
by badger.lolerskates.com with esmtp (Exim 4.34)
id 1C1zV3-000678-Jn
for webmaster@iceteks.com; Mon, 30 Aug 2004 22:40:04 -0500
From: noreply@paypal.com
To: webmaster@iceteks.com
Subject: Thank you!
Date: Mon, 30 Aug 2004 20:40:00 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016----=_NextPart_000_0016"
X-Priority: 3
X-MSMail-Priority: Normal
X-Spam-Status: No, hits=-96.8 required=5.0
tests=NO_REAL_NAME,PLING,USER_IN_WHITELIST,MSG_ID_ADDED_BY_MTA_2,
RCVD_IN_ORBS
version=2.31
X-Spam-Level:
Status:

Archived topic from Iceteks, old topic ID:2584, old post ID:21412