Returned mail: see transcript for details

From: Mail Delivery Subsystem <MAILER-DAEMON_at_mx2.cisbg.com>
Date: Wed, 14 Feb 2007 19:45:08 +0200

The original message was received at Wed, 14 Feb 2007 18:04:37 +0200
from purple.bonev.com [195.69.109.190]

   ----- The following addresses had permanent fatal errors -----
<repp_at_avatar.uwaterloo.ca>
    (reason: 550 5.1.1 <repp_at_avatar.uwaterloo.ca>... User unknown)

   ----- Transcript of session follows -----
... while talking to sciborg.uwaterloo.ca.:
>>> DATA
<<< 550 5.1.1 <repp_at_avatar.uwaterloo.ca>... User unknown
550 5.1.1 <repp_at_avatar.uwaterloo.ca>... User unknown
<<< 503 5.0.0 Need RCPT (recipient)

attached mail follows:

---

Spam detection software, running on the system "mx2.cisbg.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Dear user of avatar.uwaterloo.ca, We have detected that
  your email account has been used to send a large amount of spam
  messages during this week. Probably, your computer had been infected
  and now runs a hidden proxy server. [...]

Content analysis details: (4.8 points, 3.5 required)

 pts rule name description
---- ---------------------- --------------------------------------------------
 0.1 NO_REAL_NAME From: does not include a real name
 1.4 MSGID_FROM_MTA_ID Message-Id for external message added locally
 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
 3.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook

attached mail follows:

---

('binary' encoding is not supported, stored as-is)

Dear user of avatar.uwaterloo.ca,

We have detected that your email account has been used to send a large amount of spam messages during this week.
Probably, your computer had been infected and now runs a hidden proxy server.

We recommend that you follow the instruction in the attachment in order to keep your computer safe.

Sincerely yours,
avatar.uwaterloo.ca user support team.

Received on Wed Feb 14 2007 - 12:45:10 EST