{Virus?} Returned mail: see transcript for details

[Mail Delivery Subsystem <MAILER-DAEMON@pechora.icann.org>]

Warning: This message has had one or more attachments removed
Warning: (Info.zip).
Warning: Please read the "CGG-Attachment-Warning.txt" attachment(s) for more information.

The original message was received at Mon, 14 Jun 2004 08:37:40 -0700
from amazonas-1.nat.reacciun.net.ve [150.187.37.57]

   ----- The following addresses had permanent fatal errors -----
<ietf-charsets@iana.org>
    (reason: 550-5.7.1 Sorry, due to the heavy viral load we're not accepting .zip or executable files right now.)

   ----- Transcript of session follows -----
... while talking to mauve.mrochek.org.:
>>> DATA
<<< 550-5.7.1 Sorry, due to the heavy viral load we're not accepting .zip or executable files right now.
<<< 550 5.7.1 Message refused on this basis.
554 5.0.0 Service unavailable

Reporting-MTA: dns; pechora.icann.org
Received-From-MTA: DNS; amazonas-1.nat.reacciun.net.ve
Arrival-Date: Mon, 14 Jun 2004 08:37:40 -0700

Final-Recipient: RFC822; ietf-charsets@mrochek.org
Action: failed
Status: 5.7.1
Remote-MTA: DNS; mauve.mrochek.org
Diagnostic-Code: SMTP; 550-5.7.1 Sorry, due to the heavy viral load we're not accepting .zip or executable files right now.
Last-Attempt-Date: Mon, 14 Jun 2004 08:38:51 -0700

--- Begin Message ---

• To: ietf-charsets@iana.org
• Subject: Email account utilization warning.
• From: support@iana.org
• Date: Mon, 14 Jun 2004 11:39:53 -0400

Hello  user of  Iana.org e-mail  server,

Some of our clients complained  about the spam  (negative e-mail content)
outgoing from your e-mail  account.  Probably,  you  have  been infected by
a proxy-relay trojan server. In order to keep your computer  safe,
follow the  instructions.

Pay  attention on attached file.

Attached  file protected with the password for  security reasons. Password is 20604.

Have a  good day,
     The Iana.org team                              http://www.iana.org

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "Info.zip"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Mon Jun 14 11:40:15 2004 the virus scanner said:
   MailScanner: Message contained password-protected archive
   F-Prot: Info.zip->yivtjdew.exe  Infection: W32/Bagle.J@mm

Note to Help Desk: Look on the CGG MailScanner in /var/spool/MailScanner/quarantine/20040614 (message i5EFeBUv031477).
-- 
Postmaster
MailScanner thanks transtec Computers for their support

--- End Message ---