PDA

View Full Version : Spam from Winamp


Nick555
11th March 2011, 14:28
I have now had my first spam following the Winamp security screw-up. Thanks guys.

Return-Path: <lonsdalelwd@tele2.nl>
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.2 required=5.0 tests=FORGED_MUA_OUTLOOK,
MSGID_FROM_MTA_HEADER,MSOE_MID_WRONG_CASE
X-Spam-Report:
* 2.2 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
* 0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
* 4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Received: from mail.oud-krimpen.nl (static.ip-80-246-197-073.signet.nl [80.246.197.73] (may be forged))
by mailhost.xxx (8.14.3/8.14.2) with ESMTP id p2702oY2064296
(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)
for <xxxx>; Sun, 6 Mar 2011 19:02:51 -0500 (EST)
(envelope-from lonsdalelwd@tele2.nl)
Message-Id: <201103070002.p2702oY2064296@mailhost.xxx>
Received: from User ([70.39.119.73])
(authenticated user ctrlalto@oud-krimpen.nl)
by mail.oud-krimpen.nl (Kerio MailServer 6.4.1);
Tue, 8 Mar 2011 00:45:49 +0100
Reply-To: <neshanb3@hotmail.com>
From: "MSPA Secret Shopper®"<lonsdalelwd@tele2.nl>
Subject: *****SPAM***** Job Opening: Mystery Shoppers World
Date: Sun, 6 Mar 2011 16:48:40 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0039_01C2A9A6.4960D5FE"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;
X-Spam-Prev-Subject: Job Opening: Mystery Shoppers World
X-Spam: YES
X-Deliver-To: Spam

osmosis
11th March 2011, 15:27
Boo hoo.

Wildrose-Wally
13th March 2011, 01:59
Yeah, easy to blame Winamp, even if they might not be the cause and certainly are not the sender. However, don't worry, there will be more.
I get 10-20 a day, not due to Winamp either.

Batter Pudding
13th March 2011, 19:09
The "From" line is funny. From: "MSPA Secret Shopper®"<lonsdalelwd@tele2.nl>

First time I have seen a spammer resort to an anagram. MPSA?

I am assuming that you know this is spam due to Winamp because you only used your email address on this forum? Haven't noticed anything myself yet, but the email address I use here is from my ISP, and they use GoogleMail, so any spam is being caught in their filters so far.