*****SPAM***** {Disarmed} {Virus?} Question from eBay Member

["eBay member" <members@eBay.com>]

Spam detection software, running on the system "rimantadine.ncsa.uiuc.edu", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
postmaster@ncsa.uiuc.edu for details.

Content preview:  Warning: This message has had one or more attachments
  removed Warning: (msg-29225-115.html). Warning: Please read the
  "NCSA-Attachment-Warning.txt" attachment(s) for more information. This
  is a message from the MailScanner E-Mail Virus Protection Service The
  original e-mail attachment "msg-29225-115.html" was believed to be
  infected by a virus and has been replaced by this warning message. [...] 

Content analysis details:   (20.6 points, 4.9 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.4 X_PRIORITY_HIGH        Sent with 'X-Priority' set to high
 4.5 MIME_BOUND_DD_DIGITS   Spam tool pattern in MIME boundary
 4.4 MSGID_SPAM_CAPS        Spam tool Message-Id: (caps variant)
 0.1 FORGED_RCVD_HELO       Received: contains a forged HELO
 0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
 0.0 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                            [score: 0.5000]
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP address
                            [72.68.61.35 listed in dnsbl.sorbs.net]
 0.2 DNS_FROM_RFC_ABUSE     RBL: Envelope sender in abuse.rfc-ignorant.org
 1.9 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [72.68.61.35 listed in combined.njabl.org]
 2.6 FORGED_MSGID_HOTMAIL   Message-ID is forged, (hotmail.com)
 1.6 MISSING_MIMEOLE        Message has X-MSMail-Priority, but no X-MimeOLE
 4.1 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
-1.3 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.

--- Begin Message ---

• To: vmi-bug@ncsa.uiuc.edu
• Subject: {Disarmed} {Virus?} Question from eBay Member
• From: "eBay member" <members@eBay.com>
• Date: Sun, 29 Oct 2006 19:54:43 +0500
• Content-type: multipart/mixed; boundary="--27241376080864559"
• Reply-to: "eBay member" <members@eBay.com>

Warning: This message has had one or more attachments removed
Warning: (msg-29225-115.html).
Warning: Please read the "NCSA-Attachment-Warning.txt" attachment(s) for more information.

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "msg-29225-115.html"
was believed to be infected by a virus and has been replaced by this warning
message.

Due to limitations placed on us by the Regulation of Investigatory Powers
Act 2000, we were unable to keep a copy of the infected attachment. Please
ask the sender of the message to disinfect their original version and send
you a clean copy.

At Sun Oct 29 08:50:53 2006 the virus scanner said:
   ClamAV Module: msg-29225-115.html was infected: HTML.Phishing.Auction-144

-- 
Postmaster

MailScanner thanks transtec Computers for their support

--- End Message ---