[NVisionIP] *****SPAM***** {Filename?} test

["Mail Administrator" <noreply@ncsa.uiuc.edu>]

Spam detection software, running on the system "rimantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
postmaster@ncsa.uiuc.edu for details.

Content preview:  Warning: This message has had one or more attachments
  removed Warning: (payment.zip, joke..pif). Warning: Please read the
  "NCSA-Attachment-Warning.txt" attachment(s) for more information. This
  is a message from the MailScanner E-Mail Virus Protection Service The
  original e-mail attachment "payment.zip" is on the list of unacceptable
  attachments for this site and has been replaced by this warning message.
  [...] 

Content analysis details:   (10.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.6 MSGID_OUTLOOK_INVALID  Message-Id is fake (in Outlook Express format)
 0.1 HTML_90_100            BODY: Message is 90% to 100% HTML
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 0.0 HTML_MESSAGE           BODY: HTML included in message
 2.4 RCVD_IN_WHOIS_BOGONS   RBL: CompleteWhois: sender on bogons IP block
          [112.42.183.157 listed in combined-HIB.dnsiplists.completewhois.com]
 2.2 RCVD_IN_WHOIS_INVALID  RBL: CompleteWhois: sender on invalid IP block
            [61.11.49.216 listed in combined-HIB.dnsiplists.completewhois.com]
 3.9 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL
                            [61.11.49.216 listed in sbl-xbl.spamhaus.org]
 1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [61.11.49.216 listed in combined.njabl.org]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

--- Begin Message ---

• To: <nvisionip@ncsa.uiuc.edu>
• Subject: {Filename?} test
• From: "Mail Administrator" <noreply@ncsa.uiuc.edu>
• Date: Thu, 9 Mar 2006 18:57:00 +0530
• Content-type: multipart/mixed; boundary="----=_NextPart_000_0161_F21B6A55.6B3E447C"

Warning: This message has had one or more attachments removed
Warning: (payment.zip, joke..pif).
Warning: Please read the "NCSA-Attachment-Warning.txt" attachment(s) for more information.

 

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "payment.zip"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Thu Mar  9 07:44:48 2006 the virus scanner said:
   MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (joke..pif)

Note to Help Desk: Look on the NCSA MailScanner (mail) in /var/spool/mailimage/quarantine/20060309 (message k29DiRx29162).
-- 
Postmaster
National Center for Supercomputing Applications
www.ncsa.uiuc.edu

MailScanner thanks transtec Computers for their support

--- End Message ---