myspace spam with virus

[cleanmx]

Offending email:

Code: [Select]

Return-Path: <unobjectionablee@rossiemusic.com>
X-Original-To: abuse@clean-mx.de
Delivered-To: abuse@clean-mx.de
Received: from relayn.netpilot.net (relayn19.netpilot.net [195.214.79.19])
(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
(No client certificate requested)
by ksrv8.netpilot.net (Postfix) with ESMTPS id D7E36252C002
for <abuse@clean-mx.de>; Thu, 29 Oct 2009 19:20:19 +0100 (CET)
Received: from relayn.netpilot.net (localhost [127.0.0.1])
by relayn.netpilot.net (Postfix) with ESMTP id 95B2D1EC800E
for <abuse@clean-mx.de>; Thu, 29 Oct 2009 19:20:19 +0100 (CET)
Received: from localhost (unknown [127.0.0.1])
by localhost (Postfix) with ESMTP id 4F52D1EB800B
for <abuse@clean-mx.de>; Thu, 29 Oct 2009 18:20:19 +0000 (UTC)
Received: from relay.netpilot.net ([62.67.240.16])
by localhost (relayn.netpilot.net [62.67.240.20]) (clean-mx, port 10024)
with ESMTP id glMUBBe3dmAF for <abuse@clean-mx.de>;
Thu, 29 Oct 2009 19:20:18 +0100 (CET)
Received: from alnair.ae.poznan.pl (alnair.ae.poznan.pl [150.254.36.45])
by relay.netpilot.net (Postfix) with ESMTP id A9DBB159B52
for <abuse@clean-mx.de>; Thu, 29 Oct 2009 19:20:18 +0100 (CET)
Received: from 150.254.36.45 by mail5.zoneedit.com; Thu, 29 Oct 2009 19:18:36 +0100
Message-ID: <000d01ca58c4$3b7e07b0$6400a8c0@unobjectionablee>
From: "Myspace Service" <service@myspace.com>
To: <abuse@clean-mx.de>
Subject: Myspace Password Reset Confirmation
Date: Thu, 29 Oct 2009 19:18:36 +0100
MIME-Version: 1.0
Content-Type: multipart/mixed;
  boundary="----=_NextPart_000_0006_01CA58C4.3B7E07B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01CA58C4.3B7E07B0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit

Hello,

Because of the measures taken to provide safety to our clients, your password has been changed. You can find your new password in attached document.

Thanks,
The Myspace Team

------=_NextPart_000_0006_01CA58C4.3B7E07B0
Content-Type: application/zip;
name="myspace_94354.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="myspace_94354.zip"

vt results: 13/41  http://www.virustotal.com/de/analisis/a5742451fddcdaf47a996773e41914ff56d96030ef1f4a17b975454493c0c805-1256840585

-- gerhard