[ROOT] Mail delivery failed: returning message to sender

From: Mail Delivery System (Mailer-Daemon@mail16.cwidc.net)
Date: Mon Jun 07 2004 - 11:38:39 MEST


This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  nomoto@cambridgefilter.com
    Child process of local_delivery transport returned 67 (could mean user nonexistent) from command:
    /usr/local/pop/etc/sendpop

The following text was generated during the delivery attempt:

------ nomoto@cambridgefilter.com ------

Program name is "sendpop"
Args user=[nomoto], domain=[cambridgefilter.com], sender=[roottalk@pcroot.cern.ch]
sendpop: Unknown user "nomoto@cambridgefilter.com" (err=0)

------ This is a copy of the message, including all the headers. ------

Return-path: <roottalk@pcroot.cern.ch>
Received: from [154.33.69.53] (helo=smtp2.jp.viruscheck.net)
	by mail16.cwidc.net with esmtp (Exim 3.36 #3)
	id 1BXGaV-00064N-00
	for nomoto@cambridgefilter.com; Mon, 07 Jun 2004 18:38:39 +0900
Received: from scan1.jp.viruscheck.net ([154.33.69.36] helo=mail1.jp.viruscheck.net)
	by smtp2.jp.viruscheck.net with esmtp (Exim 3.36 #1)
	id 1BXGaV-0002O2-00
	for nomoto@cambridgefilter.com; Mon, 07 Jun 2004 18:38:39 +0900
Received: from [154.33.61.130] (helo=mx3.cwidc.net)
	by mail1.jp.viruscheck.net with esmtp (Exim 3.36 #3)
	id 1BXGaU-0003eo-00
	for nomoto@cambridgefilter.com; Mon, 07 Jun 2004 18:38:38 +0900
Received: from [217.37.102.169] (helo=cambridgefilter.com)
	by mx3.cwidc.net with esmtp (Exim 3.36 #3)
	id 1BXGaR-0003QT-00
	for <nomoto@cambridgefilter.com>; Mon, 07 Jun 2004 18:38:36 +0900
From: roottalk@pcroot.cern.ch
To: nomoto@cambridgefilter.com
Subject: Mail Delivery (failure nomoto@cambridgefilter.com)
Date: Mon, 7 Jun 2004 10:38:16 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
	type="multipart/alternative";
	boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
X-Priority: 3
X-MSMail-Priority: Normal
Message-Id: <E1BXGaR-0003QT-00@mx3.cwidc.net>

This is a multi-part message in MIME format.

------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit

******************  Virus Warning Message (on the network)

Found virus HTML_Netsky.P in file email-body
The file is deleted.

*Please note :

In the case of a virus forging the sender address,
"from" field of this notification can be forged.

Please refer to the Trend Micro web site about the virus.
http://www.trendmicro.com/

$B$"$J$?08$KAw$i$l$?%a!<%kCf$K%&%$%k%9$,8!CN$5$l$^$7$?$N$G!"(B
$B46@w%U%!%$%k$r:o=|$7$^$7$?!#(B

$B"($4Cm0U(B

$BAw?.85$r2~$6$s$9$k%&%$%k%9$,B8:_$9$k$?$a!"Aw?.85%a!<%k%"%I%l%9$,(B
$B<B:]$NAw?.<T$H$O0[$J$k>l9g$,$"$j$^$9!#(B

$B%&%#%k%9$N>\:Y$K$D$$$F$O!"(BTrend Micro$B<R$N%[!<%`%Z!<%8$r$4Mw2<$5$$!#(B
http://www.trendmicro.co.jp/


VirusCheck - http://www.cw.com/jp

Found virus WORM_NETSKY.P in file message.scr
The file is deleted.

*Please note :

In the case of a virus forging the sender address,
"from" field of this notification can be forged.

Please refer to the Trend Micro web site about the virus.
http://www.trendmicro.com/

$B$"$J$?08$KAw$i$l$?%a!<%kCf$K%&%$%k%9$,8!CN$5$l$^$7$?$N$G!"(B
$B46@w%U%!%$%k$r:o=|$7$^$7$?!#(B

$B"($4Cm0U(B

$BAw?.85$r2~$6$s$9$k%&%$%k%9$,B8:_$9$k$?$a!"Aw?.85%a!<%k%"%I%l%9$,(B
$B<B:]$NAw?.<T$H$O0[$J$k>l9g$,$"$j$^$9!#(B

$B%&%#%k%9$N>\:Y$K$D$$$F$O!"(BTrend Micro$B<R$N%[!<%`%Z!<%8$r$4Mw2<$5$$!#(B
http://www.trendmicro.co.jp/


VirusCheck - http://www.cw.com/jp

*********************************************************

------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_001C_01C0CA80.6B015D10"

------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

------=_NextPart_001_001C_01C0CA80.6B015D10
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit


******************  Virus Warning Message (on the network)

email-body is removed from here because it contains a virus.

*********************************************************
------=_NextPart_001_001C_01C0CA80.6B015D10--

------=_NextPart_000_001B_01C0CA80.6B015D10
Content-Type: text/plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit


******************  Virus Warning Message (on the network)

message.scr is removed from here because it contains a virus.

*********************************************************
------=_NextPart_000_001B_01C0CA80.6B015D10--



This archive was generated by hypermail 2b29 : Sun Jan 02 2005 - 05:50:08 MET