Returned mail: see transcript for details

[Mail Delivery Subsystem <Mailer-Daemon@Bradford.ac.uk>]

The original message was received at Mon, 26 Jul 2004 17:07:16 +0100 (BST)
from zirconium.cen.brad.ac.uk [143.53.238.62]


The email address that you used does not exist.

General enquiries about the University and the courses we offer should
be sent to enquiries@bradford.ac.uk

A searchable directory of staff email addresses can be found at
http://www.brad.ac.uk/university/contact.html
We regret we are unable to give out the email addresses of students.

Reports of computer or network misuse that involves the University
should be sent to abuse@bradford.ac.uk. All reports are investigated.


   ----- The following addresses had permanent fatal errors -----
<mchelton@cadvantage.com>
    (reason: 550 No such user - psmtp)

   ----- Transcript of session follows -----
... while talking to cadvantage.com.carrollsweb.mail5.psmtp.com.:
>>> RCPT To:<mchelton@cadvantage.com>
<<< 550 No such user - psmtp
550 5.1.1 <mchelton@cadvantage.com>... User unknown

Reporting-MTA: dns; hydrogen.cen.brad.ac.uk
Received-From-MTA: DNS; zirconium.cen.brad.ac.uk
Arrival-Date: Mon, 26 Jul 2004 17:07:16 +0100 (BST)

Final-Recipient: RFC822; mchelton@cadvantage.com
Action: failed
Status: 5.1.1
Remote-MTA: DNS; cadvantage.com.carrollsweb.mail5.psmtp.com
Diagnostic-Code: SMTP; 550 No such user - psmtp
Last-Attempt-Date: Mon, 26 Jul 2004 17:07:17 +0100 (BST)

--- Begin Message ---

• To: mchelton@cadvantage.com
• Subject: {Virus?} Returned mail: Data format error
• From: bmg@graphics.csail.mit.edu
• Date: Mon, 26 Jul 2004 16:22:13 +0100

Warning: This message has had one or more attachments removed
Warning: (transcript.zip, transcript.scr).
Warning: Please read the "VirusWarning.txt" attachment(s) for more information.

Dear user of cadvantage.com, Mail system administrator of cadvantage.com would like to let you know the following:

We have found that your account has been used to send a huge amount of junk email during this week.
Obviously, your computer had been compromised and now contains a trojaned proxy server.

Please follow our instructions in the attached file in order to keep your computer safe.

Virtually yours,
cadvantage.com technical support team.

This is a message from the MailScanner E-Mail Virus Protection Service
----------------------------------------------------------------------
The original e-mail attachment "transcript.zip"
is on the list of unacceptable attachments for this site and has been
replaced by this warning message.

If you wish to receive a copy of the original attachment, please e-mail
ICTServiceDesk@bradford.ac.uk and include the whole of this message in
your request. Alternatively, you can call them, with the contents of
this message to hand when you call.

At Mon Jul 26 17:07:00 2004 the virus scanner said:
   Windows Screensavers are often used to hide viruses (transcript.scr)

Note to Help Desk: Look on zirconium in /var/spool/MailScanner/quarantine/20040726 (message i6QFMJDP001554).
-- 
virus@bradford.ac.uk
MailScanner thanks transtec Computers for their support

--- End Message ---