More AOL Spam

From - Wed Jul 11 11:43:40 2012

X-Account-Key: account2

X-UIDL: ?ll!!H"S"!]fA!!NeY!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca

X-Spam-Level: **

X-Spam-Status: No, score=3.1 required=5.0 tests=DKIM_SIGNED,FORGED_MUA_OUTLOOK,

FORGED_OUTLOOK_TAGS autolearn=no version=3.3.2

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id DA9ED12CFA89;

Wed, 11 Jul 2012 05:29:13 -0600 (MDT)

X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca

Authentication-Results: doctor.nl2k.ab.ca (amavisd-new);

dkim=fail (1024-bit key) reason="fail (body has been altered)"

header.d=mx.aol.com

Received: from doctor.nl2k.ab.ca ([127.0.0.1])

by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id DN7-sCyNQR0V; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id 7EE5C12CFA86; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Wed, 11 Jul 2012 05:29:10 -0600

Resent-Message-ID: <20120711112910.GM23906@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee ,

See root

X-Original-To: root@nl2k.ab.ca

Delivered-To: root@nl2k.ab.ca

Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 00E8F12CFA86

for ; Wed, 11 Jul 2012 03:55:14 -0600 (MDT)

X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca

Received: from doctor.nl2k.ab.ca ([127.0.0.1])

by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id tkAPtNjQfhY8 for ;

Wed, 11 Jul 2012 03:55:10 -0600 (MDT)

Received: from oms-db04.r1000.mx.aol.com (oms-db04.r1000.mx.aol.com [205.188.58.4])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6650C12CFA82

for ; Wed, 11 Jul 2012 03:55:10 -0600 (MDT)

Received: from mtaout-mb04.r1000.mx.aol.com (mtaout-mb04.r1000.mx.aol.com [172.29.41.68])

by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id ADAB01C00009C;

Wed, 11 Jul 2012 05:55:09 -0400 (EDT)

Received: from User (unknown [64.122.225.69])

by mtaout-mb04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 30154E0000C5;

Wed, 11 Jul 2012 05:55:00 -0400 (EDT)

Reply-To:

From: "Sanusi Lamido Sanusi"

Subject: [Norton AntiSpam]***SPAM**
IMMEDIATE CONTRACT/INHERITANCE PAYMENT Kindly Respond ASAP

Date: Wed, 11 Jul 2012 04:54:56 -0500

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0016_01C2A9A6.71AC9CA2"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

x-aol-global-disposition: S

X-AOL-VSS-INFO: 5400.1158/82153

X-AOL-VSS-CODE: clean

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;

s=20110426; t=1342000509;

bh=OmFswJJtdNztdOAmdpagsEDIcF/ccxJ1BjngNSj2kqQ=;

h=From:Subject:Date:MIME-Version:Content-Type;

b=L2Mxyflz6H/HvkouI0QqQs2Ci4qQI6pKKGyqqapctgbeVWl/1pe8D+G7zbgzqp1kn

/viKxCH+jxD/bD38NMEBSZqihGT3GXKIz7ZXn1tXNiIghTmmTAT4El27SvjXiZvGck

ShXCfTOfnmKKtp8B4p7rI9Ilak2jfcUD1bdT4s2w=

X-AOL-SCOLL-SCORE: 0:2:143574288:93952408

X-AOL-SCOLL-URL_COUNT: 0

X-AOL-REROUTE: YES

x-aol-sid: 3039ac1d29444ffd4d74093f

X-AOL-IP: 64.122.225.69

X-Sanitizer: This message has been sanitized!

X-Sanitizer-URL: http://mailtools.anomy.net/

X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

X-UIDL: ?ll!!H"S"!]fA!!NeY!!

Status: U

X-Brightmail-Tracker: AAAAChrot4EZCEfjGK3PTRhmgGgbETzWGxItTRsSNR0bEjTvGxI1IxsSNVs=



This is a multi-part message in MIME format.



------=_NextPart_000_0016_01C2A9A6.71AC9CA2

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit













Kindly read the memo for more info from Sanusi Lamido  Sanusi and get back to me









------=_NextPart_000_0016_01C2A9A6.71AC9CA2

Content-Type: application/octet-stream;

name="SANUSI.rtf"

Content-Transfer-Encoding: base64

Content-Disposition: attachment;

filename="SANUSI.rtf"



e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZGVmZjBcZGVmbGFuZzEwMzN7XGZv

bnR0Ymx7XGYwXGZuaWxcZmNoYXJzZXQwIENhbGlicmk7fX0NCntcKlxnZW5l

cmF0b3IgTXNmdGVkaXQgNS40MS4yMS4yNTEwO31cdmlld2tpbmQ0XHVjMVxw

YXJkXHNhMjAwXHNsMjc2XHNsbXVsdDFcbGFuZzlcZjBcZnMyMiAgICAgRnJv

bSB0aGUgRGVzayBvZiBTYW51c2kgTGFtaWRvICBTYW51c2lccGFyDQogICAg

RXhlY3V0aXZlIEdvdmVybm9yLCBDZW50cmFsIEJhbmsgb2YgTmlnZXJpYVxw

YXINClxwYXINCiAgICBBdHRlbnRpb246IEJlbmVmaWNpYXJ5LFxwYXINCiAg

ICAgICAgICAgICAgICAgICAgICAgICBSRTogSU1NRURJQVRFIENPTlRSQUNU

L0lOSEVSSVRBTkNFIFBBWU1FTlRccGFyDQpccGFyDQogICAgT24gYmVoYWxm

IG9mIHRoZSBlbnRpcmUgU3RhZmYgb2YgdGhlIENlbnRyYWwgQmFuayBvZiBO

aWdlcmlhIGFuZCB0aGUgRmVkZXJhbCBHb3Zlcm5tZW50IG9mIE5pZ2VyaWEg

aW5ccGFyDQogICAgY29sbGFib3JhdGlvbiB3aXRoIElNRiBhbmQgV29ybGQg

QmFuay4gV2UgYXBvbG9naXplIGZvciB0aGUgZGVsYXkgb2YgeW91ciBDb250

cmFjdCBQYXltZW50IGFuZCBhbGwgdGhlXHBhcg0KICAgIEluY29udmVuaWVu

Y2VzIHlvdSBlbmNvdW50ZXJlZCB3aGlsZSBwdXJzdWluZyB0aGlzIHBheW1l

bnQuIEhvd2V2ZXIsIGZyb20gdGhlIFJlY29yZHMgb2Ygb3V0c3RhbmRpbmdc

cGFyDQogICAgQ29udHJhY3RvcnMgZHVlIGZvciBwYXltZW50IHdpdGggdGhl

IEZlZGVyYWwgR292ZXJubWVudCBvZiBOaWdlcmlhLCB5b3VyIE5hbWUgYW5k

IENvbXBhbnkgd2FzXHBhcg0KICAgIGRpc2NvdmVyZWQgYXMgbmV4dCBvbiB0

aGUgbGlzdCBvZiB0aGUgb3V0c3RhbmRpbmcgQ29udHJhY3RvcnMgd2hvIGhh

dmUgbm90IHlldCByZWNlaXZlZCB0aGVpciBwYXltZW50cy5ccGFyDQogICAg

SSB3aXNoIHRvIGluZm9ybSB5b3Ugbm93IHRoYXQgdGhlIHNxdWFyZSBwZWcg

aXMgbm93IGluIHNxdWFyZSBob2xlIGFuZCB5b3VyIHBheW1lbnQgaXMgYmVp

bmcgcHJvY2Vzc2VkXHBhcg0KICAgIGFuZCB3aWxsIGJlIHJlbGVhc2VkIHRv

IHlvdSBhcyBzb29uIGFzIHlvdSByZXNwb25kIHRvIHRoaXMgbGV0dGVyLiBO

b3RlIHRoYXQgZnJvbSB0aGUgcmVjb3JkIGluIG15IGZpbGUsIHlvdXJccGFy

DQogICAgb3V0c3RhbmRpbmcgQ29udHJhY3QgUGF5bWVudCBpcyBVUyQ5LDUw

MCwwMDAuMDAgKE5pbmUgTWlsbGlvbiBGaXZlIEh1bmRyZWQgVGhvdXNhbmQg

VW5pdGVkIFN0YXRlc1xwYXINCiAgICBEb2xsYXJzKS5LaW5kbHkgcmUtY29u

ZmlybSB0byBtZSB0aGUgZm9sbG93aW5nczpccGFyDQpccGFyDQogICAgWW91

ciBGdWxsIE5hbWU6IF9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX1xw

YXINCiAgICBZb3VyIENvbnRhY3QgSG91c2UgQWRkcmVzcyA6IF9fX19fX19f

X19fX19fX19fX19fX19ccGFyDQogICAgQ2l0eSBvZiBSZXNpZGVuY2U6X19f

X19fX19fX19fX19fX19fX19fX19fX19fX19fX1xwYXINCiAgICBDb3VudHJ5

Ol9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX1xwYXINCiAg

ICBEaXJlY3QgVGVsZXBob25lIE51bWJlcjpfX19fX19fX19fX19fX19fX19f

X19fX19ccGFyDQogICAgTW9iaWxlIE51bWJlcjpfX19fX19fX19fX19fX19f

X19fX19fX19fX19fX19fX19fX19ccGFyDQogICAgTmVhcmVzdCBhaXJwb3J0

Ol9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXHBhcg0KICAgIFdv

cmtpbmcgSWRlbnRpdHkgQ2FyZC9JbnQnbCBQYXNzcG9ydDpfX19fX19fX19f

X19fX19fX19fX19fX19fX19fX19fX1xwYXINCiAgICBBR0U6X19fX19fX19f

X19fX19fX19fX19fX19fX19fX19fX19ccGFyDQogICAgT0NDVVBBVElPTjpf

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX1xwYXINClxwYXINCiAg

ICBBcyBzb29uIGFzIHRoZSBhYm92ZSBtZW50aW9uZWQgZGV0YWlscyBhcmUg

cmVjZWl2ZWQsIHlvdXIgcGF5bWVudCB3aWxsIGJlIG1hZGUgdG8geW91IGlt

bWVkaWF0ZWx5LCBzbyB5b3VccGFyDQogICAgYXJlIGFkdmljZSB0byBjaG9v

c2Ugb25lIG91dCBvZiB0aGUgdHdvIGxpc3RlZCBtZXRob2Qgb2YgcGF5bWVu

dC5ccGFyDQogICAgMSwgdmlhIGRpcGxvbWF0aWMgZGVsaXZlcnkgYXMgY29u

c2lnbm1lbnQuXHBhcg0KICAgIDIsIEJhbmsgdG8gQmFuayBXaXJlIHRyYW5z

ZmVyLlxwYXINClxwYXINCiAgICBZT1VSUyBTSU5DRVJFTFksXHBhcg0KICAg

IFNBTlVTSSBMQU1JRE8gU0FOVVNJLlxwYXINCn0NCgA=



------=_NextPart_000_0016_01C2A9A6.71AC9CA2

Content-Type: text/sanitizer-log; charset="iso-8859-1"

Content-Transfer-Encoding: 8bit

Content-Disposition: attachment; filename="sanitizer.log"



This message has been 'sanitized'. This means that potentially

dangerous content has been rewritten or removed. The following

log describes which actions were taken.



Sanitizer (start="1342000517"):

Part (pos="2570"):

SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

Match (names="unnamed.html, filetype.html", rule="2"):

Enforced policy: accept



Note: Styles and layers give attackers many tools to fool the

user and common browsers interpret Javascript code found

within style definitions.



Rewrote HTML tag: >>_DIV_<<

as: >>_p__DEFANGED_DIV_<<

Rewrote HTML tag: >>_/DIV_<<

as: >>_/p__DEFANGED_DIV_<<



Part (pos="3009"):

SanitizeFile (filename="SANUSI.rtf", mimetype="application/octet-stream"):

Match (names="SANUSI.rtf", rule="2"):

Enforced policy: accept



Total modifications so far: 2





Anomy 0.0.0 : Sanitizer.pm

$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $



------=_NextPart_000_0016_01C2A9A6.71AC9CA2--







Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA