Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 08 Jun 2013 03:59:31 -0400
From:      "Lyris ListManager" <lyris-noreply@list.cornell.edu>
To:        freebsd-isp@freebsd.org
Subject:   Message rejected
Message-ID:  <LYRIS-0-98061951-2013.06.08-03.59.31--lyris-noreply@list.cornell.edu>

next in thread | raw e-mail | index | archive | help
Your message posting was rejected because:

  > Subject: header contains: 'RETURNED MAIL'

This text is usually only included by automated email programs, such as
"vacation" programs. For this reason, Lyris ListManager does not accept messages
which contain this text, because it is highly likely that they are
automated messages, and not appropriate for a mailing list.  

If you are receiving this message, it means that you accidentally set off
this safeguard.

Please resubmit your email message, without including this "trigger text".

---

For your convenience, the message is question in reproduced below:

Return-Path: <freebsd-isp@freebsd.org>
Received: from wisteria.mail.cornell.edu ([132.236.56.52]) by topaz5.mail.cornell.edu with SMTP (Lyris ListManager LINUX version 11.3); Sat, 08 Jun 2013 03:59:30 -0400
Received: from exchange.cornell.edu (cashub11.exchange.cornell.edu [10.16.197.30])
	by wisteria.mail.cornell.edu (8.13.6/8.12.9) with ESMTP id r587xdEE010694
	for <CZERNOWITZ-L@list.cornell.edu>; Sat, 8 Jun 2013 03:59:39 -0400 (EDT)
Received: from pawpaw.mail.cornell.edu (128.253.83.170) by
 CASHUB11.exchange.cornell.edu (10.16.197.30) with Microsoft SMTP Server id
 14.2.309.2; Sat, 8 Jun 2013 03:59:28 -0400
Received: from freebsd.org ([117.220.208.57])	by pawpaw.mail.cornell.edu
 (8.14.4/8.14.4) with ESMTP id r587xJCM030523	for <czernowitz-l@cornell.edu>;
 Sat, 8 Jun 2013 03:59:24 -0400
Message-ID: <201306080759.r587xJCM030523@pawpaw.mail.cornell.edu>
From: <freebsd-isp@freebsd.org>
To: <czernowitz-l@cornell.edu>
Subject: [PMX:VIRUS]  [PMX:##] Returned mail: see transcript for details
Date: Sat, 8 Jun 2013 13:29:26 +0530
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_0005_012C3CCC.017CCDE2"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-PMX-CORNELL-SPAM-CHECKED: wisteria
X-PMX-CORNELL-SPAM-CHECKED: Pawpaw
X-PMX-Version: 5.5.9.395186, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2013.6.8.74519
X-PMX-Version: 5.5.9.395186, Antispam-Engine: 2.7.2.376379, Antispam-Data: 2013.6.8.74519
X-Original-Sender: freebsd-isp@freebsd.org - Sat Jun  8 03:59:28 2013
X-PerlMx-Spam: Gauge=XXXXXXXII, Probability=72%, Report='
 ZIP_ATTACHED_SCR_PIF 6.5, NO_MESSAGE_ID 0.3, HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_10000_PLUS 0, BOUNCE_ENVELOPE 0, BOUNCE_GENERIC 0, BOUNCE_NDR 0, FORGED_MUA_OUTLOOK 0, NO_REAL_NAME 0, RDNS_NXDOMAIN 0, RDNS_SUSP 0, RDNS_SUSP_GENERIC 0, USER_AGENT_OE 0, ZIP_ATTACHED 0, __ANY_URI 0, __ATTACHMENT_SIZE_25_50K 0, __BOUNCE_NDR_SUBJECT_CONTAINS 0, __CT 0, __CTYPE_HAS_BOUNDARY 0, __CTYPE_MULTIPART 0, __CTYPE_MULTIPART_MIXED 0, __HAS_FROM 0, __HAS_MSMAIL_PRI 0, __HAS_X_MAILER 0, __HAS_X_PRIORITY 0, __MIME_VERSION 0, __OUTLOOK_MUA 0, __OUTLOOK_MUA_1 0, __PHISH_SPEAR_GREETING 0, __PHISH_SPEAR_TEAM 0, __SUBJ_ALPHA_END 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_NO_PATH 0, __URI_NO_WWW 0, __USER_AGENT_MS_GENERIC 0'
X-PerlMx-Virus-Detected: Troj/ZipMal-AW, W32/MyDoom-O
X-ORG-Envelope-From: freebsd-isp@freebsd.org

------=_NextPart_000_0005_012C3CCC.017CCDE2
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Dear user czernowitz-l@cornell.edu,

We have detected that your account has been used to send a huge amount of junk email messages during the recent week.
Most likely your computer was infected by a recent virus and now runs a hidden proxy server.

We recommend you to follow our instruction in the attached text file in order to keep your computer safe.

Sincerely yours,
cornell.edu support team.


------=_NextPart_000_0005_012C3CCC.017CCDE2
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: 8bit

Notice from Cornell University's mail system:

This message originally contained what Cornell University's
mail system
detected as a virus.

That portion of the message has been replaced by this
warning.

This warning does not necessarily mean that the sender's
computer is
infected, or that the person who supposedly sent it
actually did send it.
Viruses often create false "To" and "From" addresses. For
that reason, the
sender of the message was not notified that a virus was
found.

If you believe the sender actually did send the message,
please use your
judgment in deciding how or whether to notify the sender
yourself.

To help protect your own computer, please be sure you are
running up-to-date
antivirus software. Cornell offers free antivirus software
to current
Cornell students, faculty, and staff:
http://www.cit.cornell.edu/security/symantec/

If you have any questions or concerns, please contact your
department's
computer support staff, or the CIT Helpdesk (607 255-8990
or
helpdesk@cornell.edu).

Information about the original message:

Virus(es) detected: W32/MyDoom-O, Troj/ZipMal-AW
Message ID: r587xJCM030523

Cornell Information Technologies
http://www.cit.cornell.edu/computer/email/puremessage/
helpdesk@cornell.edu
607 255-8990

------=_NextPart_000_0005_012C3CCC.017CCDE2--




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?LYRIS-0-98061951-2013.06.08-03.59.31--lyris-noreply>