OLOFSTROMS-KABEL-TV's malfunctioning virus scaner floods e-mail boxes of absolutely unrelated people with their virus warnings, and despite on my several warnings to them, they did nothing to stop this abuse. Not they only send their warnings to the absolutely unrelated people with not infected computers, but they also include the complete virus in their "warnings", so the people who were NOT infected, will have high chances to be infected now, after reading this "warning"! oktv2.se, [212.214.128.0 - 212.214.128.127]: Access denied! === The unrelated to me virus warning 1-1 === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g74J97p03523 for ; Sun, 4 Aug 2002 22:09:09 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Sun, 04 Aug 2002 21:09:00 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Sun, 4 Aug 2002 21:09:00 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Sun, 04 Aug 2002 21:08:55 +0200 (W. Europe Daylight Time) From: me666 To: webmaster@dolphinwave.org Subject: The Garden of Eden MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 04 Aug 2002 19:09:00.0056 (UTC) FILETIME=[63AE7980:01C23BEA] Date: 4 Aug 2002 21:09:00 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=YPoLH0132R0235E3IeM94lL8i3S0 --YPoLH0132R0235E3IeM94lL8i3S0 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --YPoLH0132R0235E3IeM94lL8i3S0 --YPoLH0132R0235E3IeM94lL8i3S0 Content-Type: application/octet-stream; name=usr_presentation[27].htm Content-Transfer-Encoding: base64 Content-ID: DQo8SFRNTD48SEVBRD48VElUTEU+d3d3Lmx1bmFyc3Rvcm0uc2U8L1RJVExFPg0KDQo8TElO SyBSRUw9InN0eWxlc2hlZXQiIFRZUEU9InRleHQvY3NzIiBIUkVGPSIvY3NzL2Nzc19pZS5j DQo8L1RBQkxFPg0KDQo8L0JPRFk+PC9IVE1MPg0K --YPoLH0132R0235E3IeM94lL8i3S0-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file alla m.bat contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === The unrelated to me virus warning 1-2 === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g74JDup03544 for ; Sun, 4 Aug 2002 22:13:57 +0300 Message-Id: <200208041913.g74JDup03544@mail.dolphinwave.org> Date: Sun, 04 Aug 2002 21:08:59 +0200 (W. Europe Daylight Time) From: postmaster@oktv.se To: Subject: InterScan NT Alert Status: R X-Status: N Receiver, InterScan has detected virus(es) in the e-mail attachment. Date: Sun, 04 Aug 2002 21:08:59 +0200 (W. Europe Daylight Time) Method: Mail From: To: File: alla m.bat Action: deleted Virus: WORM_KLEZ.H === My 1st report === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: admin@dolphinwave.org Organization: Private person To: postmaster@oktv.se Subject: Re: InterScan NT Alert Date: Sun, 4 Aug 2002 22:22:52 +0300 User-Agent: KMail/1.4.1 References: <200208041913.g74JDup03544@mail.dolphinwave.org> In-Reply-To: <200208041913.g74JDup03544@mail.dolphinwave.org> Cc: admin@dolphinwave.org X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200208042222.52826@2002.dolphinwave.org> Status: R X-Status: N -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Sunday 04 August 2002 10:08 pm, postmaster@oktv.se wrote: > Receiver, InterScan has detected virus(es) in the e-mail attachment. > > Date: Sun, 04 Aug 2002 21:08:59 +0200 (W. Europe Daylight Time) > Method: Mail > From: > To: > File: alla m.bat > Action: deleted > Virus: WORM_KLEZ.H Please, stop wasting other people's time with Klez virus warnings! You should know better that this virus/e-mail worm forges the "From:" headers and as a result you bounce your warning to the completely unrelated person. For your information - I do not run Windows and none of my computers can be infected with this stuff. Regards, Alexander Sheremet. DolphinWave.org Admin. -----BEGIN PGP SIGNATURE----- Comment: Key ID: 0xAAE2A579 iD8DBQE9TX7TAAsPtqripXkRAn7SAJ9wJNQnIacXCa11ksWY7sUSUUK01gCgrmYk D7frjBsRVPQUxX5HbyU1l3Q= =Dyd8 -----END PGP SIGNATURE----- === Useless virus warnings continue, 2-1 === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g75CHll06144 for ; Mon, 5 Aug 2002 15:17:51 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Mon, 05 Aug 2002 14:17:02 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Mon, 5 Aug 2002 14:17:01 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Mon, 05 Aug 2002 14:16:58 +0200 (W. Europe Daylight Time) From: woodoo To: webmaster@dolphinwave.org Subject: A special good tool MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 05 Aug 2002 12:17:01.0955 (UTC) FILETIME=[00F55530:01C23C7A] Date: 5 Aug 2002 14:17:01 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=D93d5y9T4A5595a1E0z4 --D93d5y9T4A5595a1E0z4 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable This is a special good tool
I expect you would like it. --D93d5y9T4A5595a1E0z4 --D93d5y9T4A5595a1E0z4 Content-Type: application/octet-stream; name=fulton[1].jpg Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQEASABIAAD/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8S EhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wBDAQUFBQcGBw4ICA4eFBEU 13/elSp+Rsgb/wCGT/h/9qcf7aP8h9DSpUMlkqPhFKlSpiP/2T== --D93d5y9T4A5595a1E0z4-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file color.pif contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === Useless virus warnings continue, 2-2 === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g75CODl06237 for ; Mon, 5 Aug 2002 15:24:15 +0300 Message-Id: <200208051224.g75CODl06237@mail.dolphinwave.org> Date: Mon, 05 Aug 2002 14:17:01 +0200 (W. Europe Daylight Time) From: postmaster@oktv.se To: Subject: InterScan NT Alert Status: R X-Status: N Receiver, InterScan has detected virus(es) in the e-mail attachment. Date: Mon, 05 Aug 2002 14:17:01 +0200 (W. Europe Daylight Time) Method: Mail From: To: File: color.pif Action: deleted Virus: WORM_KLEZ.H === My 2nd report === Content-Type: text/plain; charset="iso-8859-1" From: Admin Reply-To: admin@dolphinwave.org Organization: Private person To: postmaster@oktv.se, t.puschl@oktv.se, a.holmgren@saekab.se Subject: Re: InterScan NT Alert Date: Mon, 5 Aug 2002 15:40:36 +0300 User-Agent: KMail/1.4.1 References: <200208051224.g75CODl06237@mail.dolphinwave.org> In-Reply-To: <200208051224.g75CODl06237@mail.dolphinwave.org> Cc: admin@dolphinwave.org Return-Receipt-To: admin@dolphinwave.org Disposition-Notification-To: admin@dolphinwave.org X-Complaints-To: abuse@dolphinwave.org (live person) X-PGP-key: 0xAAE2A579 X-PGP-key-fingerprint: 5B8E 3B28 7199 8CD3 4133 FA87 000B 0FB6 AAE2 A579 X-No-Confirm: Yes MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Message-Id: <200208051540.36321@2002.dolphinwave.org> Status: R X-Status: N -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Monday 05 August 2002 03:17 pm, postmaster@oktv.se wrote: > Receiver, InterScan has detected virus(es) in the e-mail attachment. > > Date: Mon, 05 Aug 2002 14:17:01 +0200 (W. Europe Daylight Time) > Method: Mail > From: > To: > File: color.pif > Action: deleted > Virus: WORM_KLEZ.H I repeat again, please, STOP wasting people's time by sending your useless Klez virus reports! Klez forges the "From" headers, and your reports go to absolutely wrong people, who has NOTHING to do with that virus! I DO NOT run Windows and all my computers are completely immune from this stuff! Another such "virus report" from your network, and I will drop your whole [212.214.128.0 - 212.214.128.127] IP range to my access denied tables, so you wouldn't disturb my network with lame reports anymore. Regards, Alexander Sheremet. DolphinWave.org Admin. === Previous request was === From: Admin To: postmaster@oktv.se Subject: Re: InterScan NT Alert Date: Sun, 4 Aug 2002 22:22:52 +0300 On Sunday 04 August 2002 10:08 pm, postmaster@oktv.se wrote: > Receiver, InterScan has detected virus(es) in the e-mail attachment. > > Date: Sun, 04 Aug 2002 21:08:59 +0200 (W. Europe Daylight Time) > Method: Mail > From: > To: > File: alla m.bat > Action: deleted > Virus: WORM_KLEZ.H Please, stop wasting other people's time with Klez virus warnings! You should know better that this virus/e-mail worm forges the "From:" headers and as a result you bounce your warning to the completely unrelated person. For your information - I do not run Windows and none of my computers can be infected with this stuff. Regards, Alexander Sheremet. DolphinWave.org Admin. -----BEGIN PGP SIGNATURE----- Comment: Key ID: 0xAAE2A579 iD8DBQE9TnG6AAsPtqripXkRAvVNAKDLxM2ZtxFvuzF1eewTM98duWT4CQCg1UFY DmtFGArZM14pWCN1ODGYX/0= =TEv7 -----END PGP SIGNATURE----- === t.puschl@oktv.se (the RIPE contact for this block) bounces === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g75Cf8l06373 for ; Mon, 5 Aug 2002 15:41:10 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Mon, 05 Aug 2002 14:40:55 +0200 (W. Europe Daylight Time) From: postmaster@oktv.se To: dolphin@### Date: Mon, 5 Aug 2002 14:40:55 +0200 MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary="9B095B5ADSN=_01C23B8C61A5005C000005C6mail1.oktv.se" Message-ID: Subject: Delivery Status Notification (Failure) Status: R X-Status: N This is an automatically generated Delivery Status Notification. Delivery to the following recipients failed. t.puschl@oktv.se Attachment: 1 Attachment: 2 === My reports are ignored - viruse warnings still flow in === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g77FICl21323 for ; Wed, 7 Aug 2002 18:18:13 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Wed, 07 Aug 2002 17:18:07 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Wed, 7 Aug 2002 17:18:07 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Wed, 07 Aug 2002 17:18:03 +0200 (W. Europe Daylight Time) From: r1bbe To: webmaster@dolphinwave.org Subject: A new website MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 07 Aug 2002 15:18:07.0149 (UTC) FILETIME=[A1F1DDD0:01C23E25] Date: 7 Aug 2002 17:18:07 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=S9yU3283q30G243b90T9388339kEae90G --S9yU3283q30G243b90T9388339kEae90G Content-Type: text/html; Content-Transfer-Encoding: quoted-printable Hi,This is a very new website
I wish you would like it. --S9yU3283q30G243b90T9388339kEae90G --S9yU3283q30G243b90T9388339kEae90G Content-Type: application/octet-stream; name=house-floor1[2].jpg Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAMCAgMCAgMDAwMEAwMEBQgFBQQEBQoHBwYIDAoM DAsKCwsNDhIQDQ4RDgsLEBYQERMUFRUVDA8XGBYUGBIUFRT/2wBDAQMEBAUEBQkFBQkUDQsN FABRRRQAUUUUAf/Z --S9yU3283q30G243b90T9388339kEae90G-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file CONTENT.pif contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === Another one === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g786tIl25086 for ; Thu, 8 Aug 2002 09:55:19 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 08:55:11 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Thu, 8 Aug 2002 08:55:11 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 08:55:07 +0200 (W. Europe Daylight Time) From: Luuke_2000 To: webmaster@dolphinwave.org Subject: Language MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 08 Aug 2002 06:55:11.0447 (UTC) FILETIME=[8A3CE670:01C23EA8] Date: 8 Aug 2002 08:55:11 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=U2aGyfty13Hox8qhH36A6AP137 --U2aGyfty13Hox8qhH36A6AP137 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --U2aGyfty13Hox8qhH36A6AP137 --U2aGyfty13Hox8qhH36A6AP137 Content-Type: application/octet-stream; name=jxyx31[1].htm Content-Transfer-Encoding: base64 Content-ID: PEhUTUw+PEhFQUQ+PFRJVExFPlNleFNoYXJlOiBSZWFsIEhhcmRjb3JlICE8L1RJVExFPjwv SEVBRD4KPEJPRFkgQkdDT0xPUj0iIzAwMDAyNSIgbGluaz0ieWVsbG93IiBBTElOSz0iWUVM ICAgICAgICAgICAgICA8L2JvZHk+PC9odG1sPj== --U2aGyfty13Hox8qhH36A6AP137-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file TGP.exe contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === And more === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g78797l25190 for ; Thu, 8 Aug 2002 10:09:08 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 09:09:03 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Thu, 8 Aug 2002 09:09:02 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 09:08:58 +0200 (W. Europe Daylight Time) From: chudrellai To: webmaster@dolphinwave.org Subject: CELLSPACING MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 08 Aug 2002 07:09:02.0817 (UTC) FILETIME=[79C5E510:01C23EAA] Date: 8 Aug 2002 09:09:02 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=VK87k0rx0O42BS446rv6b2j86kNa801s --VK87k0rx0O42BS446rv6b2j86kNa801s Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --VK87k0rx0O42BS446rv6b2j86kNa801s --VK87k0rx0O42BS446rv6b2j86kNa801s Content-Type: application/octet-stream; name=BGAMEX.JPG Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAgEAYABgAAD/7QE0UGhvdG9zaG9wIDMuMAA4QklNA+0AAAAAABAAYAAA AAEAAQBgAAAAAQABOEJJTQPzAAAAAAAIAAAAAAAAAAA4QklNJxAAAAAAAAoAAQAAAAAAAAAC +fk/2TEtSvJ57dUktmhHIHk1aVodtwMyskiRyaMGKMZbS4n/2T== --VK87k0rx0O42BS446rv6b2j86kNa801s-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file BORDER.exe contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === And even more === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g78Alvl25834 for ; Thu, 8 Aug 2002 13:47:58 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 12:47:52 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Thu, 8 Aug 2002 12:47:51 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Thu, 08 Aug 2002 12:47:48 +0200 (W. Europe Daylight Time) From: r1bbe To: webmaster@dolphinwave.org Subject: Meeting notice MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 08 Aug 2002 10:47:51.0907 (UTC) FILETIME=[0B520B30:01C23EC9] Date: 8 Aug 2002 12:47:51 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=D2p33Yh26K74APWAHQpPN106TK14 --D2p33Yh26K74APWAHQpPN106TK14 Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --D2p33Yh26K74APWAHQpPN106TK14 --D2p33Yh26K74APWAHQpPN106TK14 Content-Type: application/octet-stream; name=cl[2].htm Content-Transfer-Encoding: base64 Content-ID: PGh0bWw+CjxoZWFkPgo8bWV0YSBodHRwLWVxdWl2PSJDb250ZW50LVR5cGUiIGNvbnRlbnQ9 InRleHQvaHRtbDsgY2hhcnNldD1pc28tODg1OS0xIj4KPG1ldGEgaHR0cC1lcXVpdj0iZXhw Pgo8L2JvZHk+CjwvaHRtbD4K --D2p33Yh26K74APWAHQpPN106TK14-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file bgcolor.scr contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === And more === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g798WHl30352 for ; Fri, 9 Aug 2002 11:32:24 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Fri, 09 Aug 2002 10:32:11 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Fri, 9 Aug 2002 10:32:11 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Fri, 09 Aug 2002 10:32:08 +0200 (W. Europe Daylight Time) From: an To: webmaster@dolphinwave.org Subject: New Roman MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 09 Aug 2002 08:32:11.0565 (UTC) FILETIME=[41B62DD0:01C23F7F] Date: 9 Aug 2002 10:32:11 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=V7njL82Om384TdL23nCS --V7njL82Om384TdL23nCS Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --V7njL82Om384TdL23nCS --V7njL82Om384TdL23nCS Content-Type: application/octet-stream; name=w-hall[1].jpg Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAgAAZABkAAD/7AARRHVja3kAAQAEAAAASwAA/+4AJkFkb2JlAGTAAAAA AQMAFQQDBgoNAAATMAAAJFYAADjMAABWxv/bAIQAAwICAgICAwICAwUDAwMFBQQDAwQFBgUF nEbuPdCGo30cf79RueNMMru/35n/2T== --V7njL82Om384TdL23nCS-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file href.exe contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === Another === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g79IBtl00588 for ; Fri, 9 Aug 2002 21:11:56 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Fri, 09 Aug 2002 20:11:49 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Fri, 9 Aug 2002 20:11:49 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Fri, 09 Aug 2002 20:11:46 +0200 (W. Europe Daylight Time) From: asworld To: webmaster@dolphinwave.org Subject: Hello,webmaster,how are you MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 09 Aug 2002 18:11:49.0682 (UTC) FILETIME=[3B15B120:01C23FD0] Date: 9 Aug 2002 20:11:49 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=Ne4sQi61EB8W0CMu3203V16mIV23Um3mh --Ne4sQi61EB8W0CMu3203V16mIV23Um3mh Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --Ne4sQi61EB8W0CMu3203V16mIV23Um3mh --Ne4sQi61EB8W0CMu3203V16mIV23Um3mh Content-Type: application/octet-stream; name=family1_face[9].jpg Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQAAAQABAAD/2wBDAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEB AQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQH/2wBDAQEBAQEBAQEBAQEBAQEB gopu3Km3a7tZXbsuh+Q43F1cfi8Tja/L7bFV6uIqKCagp1ZuclBNtqKbtFNtpJJtvU//2T== --Ne4sQi61EB8W0CMu3203V16mIV23Um3mh-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file family1_face[9].scr contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === And one more === Received: from oktv-mail1.oktv2.se ([212.214.128.28]) by mail.dolphinwave.org (8.11.6/8.11.6) with SMTP id g7A9STl05839 for ; Sat, 10 Aug 2002 12:28:30 +0300 Received: from 127.0.0.1 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Sat, 10 Aug 2002 11:28:23 +0200 (W. Europe Daylight Time) Received: from oktv-mail1.oktv2.se ([127.0.0.1] RDNS failed) by mail1.oktv.se with Microsoft SMTPSVC(5.0.2195.1600); Sat, 10 Aug 2002 11:28:22 +0200 Received: from 212.214.128.27 by oktv-mail1.oktv2.se (InterScan E-Mail VirusWall NT); Sat, 10 Aug 2002 11:28:20 +0200 (W. Europe Daylight Time) From: Banan_ice To: webmaster@dolphinwave.org Subject: Japanese girl VS playboy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="------------InterScan_NT_MIME_Boundary" Message-ID: X-OriginalArrivalTime: 10 Aug 2002 09:28:22.0785 (UTC) FILETIME=[45874710:01C24050] Date: 10 Aug 2002 11:28:22 +0200 Status: R X-Status: N --------------InterScan_NT_MIME_Boundary Content-Type: multipart/alternative; boundary=T07y1i74FbWA4VO --T07y1i74FbWA4VO Content-Type: text/html; Content-Transfer-Encoding: quoted-printable --T07y1i74FbWA4VO --T07y1i74FbWA4VO Content-Type: application/octet-stream; name=4724081[1].htm Content-Transfer-Encoding: base64 Content-ID: PGEgdGFyZ2V0PSJfdG9wIiBocmVmPSJodHRwOi8vYWQtYWRleDMuZmx5Y2FzdC5jb20vc2Vy dGguZ29jbGljay5jb206ODA4MC9pbWFnZXMvZ2NfcG9rZW1vbjEuZ2lmIj48L2E+ --T07y1i74FbWA4VO-- --------------InterScan_NT_MIME_Boundary Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file 4724081[1].exe contains: WORM_KLEZ.H virus It has been deleted. ***************** End of message *************** --------------InterScan_NT_MIME_Boundary-- === And even after blocking their access, they still hammer at my === === mailservers many times a day with the same bogus reports === === Sendmail logs (GMT+0300) === Aug 11 13:37:15 orca sendmail[21033]: g7BAbFl21033: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 11 13:37:16 orca sendmail[21033]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 11 22:34:23 orca sendmail[23139]: g7BJYMl23139: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 11 22:34:27 orca sendmail[23139]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 12 11:07:16 orca sendmail[25659]: g7C87Gl25659: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 12 11:07:21 orca sendmail[25659]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 12 17:58:30 orca sendmail[27434]: g7CEwTl27434: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 12 17:58:31 orca sendmail[27434]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 13 15:02:32 orca sendmail[980]: g7DC2Wl00980: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 13 15:02:34 orca sendmail[980]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 13 17:59:23 orca sendmail[1635]: g7DExNl01635: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 13 17:59:24 orca sendmail[1635]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 14 11:46:32 orca sendmail[5787]: g7E8kWl05787: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 14 11:46:38 orca sendmail[5787]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 14 15:11:04 orca sendmail[6304]: g7ECB2l06304: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 14 15:11:07 orca sendmail[6304]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 14 20:10:52 orca sendmail[7502]: g7EHAql07502: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 14 20:10:54 orca sendmail[7502]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 15 10:53:20 orca sendmail[11454]: g7F7rJl11454: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 15 10:53:24 orca sendmail[11454]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 15 21:17:37 orca sendmail[13791]: g7FIHbl13791: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 15 21:17:42 orca sendmail[13791]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0 Aug 16 11:24:37 orca sendmail[17372]: g7G8Oal17372: ruleset=check_relay, arg1=[212.214.128.28], arg2=212.214.128.28, relay=[212.214.128.28], reject=550 5.0.0 Access denied - OLOFSTROMS-KABEL-TV: bogus virus warnings to unrelated people - http://www.DolphinWave.org/spam/212.214.128.0-212.214.128.127_oktv2.se.txt Aug 16 11:24:42 orca sendmail[17372]: NOQUEUE: [212.214.128.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0