*****SPAM***** {Virus?} Re: Your product

[20061015095236.10948.qmail@087455.jp]

Spam detection software, running on the system "rimantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
postmaster@ncsa.uiuc.edu for details.

Content preview:  Warning: This message has had one or more attachments
  removed Warning: (your_product.pif). Warning: Please read the
  "NCSA-Attachment-Warning.txt" attachment(s) for more information. Your
  document is attached. [...] 

Content analysis details:   (8.3 points, 4.9 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.0 NO_REAL_NAME           From: does not include a real name
 1.3 FROM_LOCAL_HEX         From: localpart has long hexadecimal sequence
 0.7 FROM_STARTS_WITH_NUMS  From: starts with many numbers
 0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
 1.4 MSGID_FROM_MTA_ID      Message-Id for external message added locally
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0000]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [60.236.16.69 listed in dnsbl.sorbs.net]
 1.6 MISSING_MIMEOLE        Message has X-MSMail-Priority, but no X-MimeOLE
 2.7 PRIORITY_NO_NAME       Message has priority, but no user agent name

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

--- Begin Message ---

• To: vmi-bug@ncsa.uiuc.edu
• Subject: {Virus?} Re: Your product
• From: 20061015095236.10948.qmail@087455.jp
• Date: Tue, 17 Oct 2006 19:13:40 +0900
• Content-type: multipart/mixed; boundary="----=_NextPart_000_0012_00001881.000065E8"

Warning: This message has had one or more attachments removed
Warning: (your_product.pif).
Warning: Please read the "NCSA-Attachment-Warning.txt" attachment(s) for more information.

Your document is attached.

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "your_product.pif"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please e-mail the
NCSA Help Desk (help@ncsa.uiuc.edu) and include this message with your
request. Alternatively, you can call them at +1 217 244 0709 with the
contents of this message on hand when you call.

At Tue Oct 17 05:17:00 2006 the virus scanner said:
   ClamAV Module: your_product.pif was infected: Worm.SomeFool.Gen-1
   MailScanner: Shortcuts to MS-Dos programs are very dangerous in email (your_product.pif)

Note to Help Desk: Look on the NCSA MailScanner (rimantadine.ncsa.uiuc.edu) in 
/var/spool/quarantine/20061017 (message k9HAGtW7004152).
-- 
The NCSA Email guys

--- End Message ---