[Postfixbuch-users] KEINE Telekom rechnungen und so aber scheinbar genauso gefährlich

[Uwe Drießen]

Hallo Leute 

Gerade in der Mailbox gehabt 

Scheint auf Weihnachten zuzugehen :-((

Das habe ich die ganzen 2 Jahre vorher insgesamt nicht an Mails gehabt was
im Moment noch durchkommt trotz diverser Zusätze 

Header_check 
/^Subject:.*Update Your Email-Last Warning.*Virus Detected/
REJECT ZBot Trojan campaign subject detected

Body_check
/malware virus has been detected/       REJECT Body-Spamschutzregel 2014.11
# phishing
/the below web link to upgrade and Delete the virus/    REJECT
Body-Spamschutzregel 2014.11 # phishing

Wer andere Ideen hat für checks nur her damit 




-----------

Return-Path: <jonathan at feshanphils.com>
Delivered-To: <meine at fblan.de>
Received: from mx.fblan.de ([::1])
	by mail.fblan.de (Dovecot) with LMTP id zUoYODU3bFTsYAAAQldSjw
	for <meine at fblan.de>; Wed, 19 Nov 2014 07:23:42 +0100
X-Virus-Scanned: Debian amavisd-new at mail.fblan.de
X-policyd-weight:  NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5
CL_IP_EQ_HELO_IP=-2 (check from: .feshanphils. - helo: .mx-02-01.wlink. -
helo-domain: .wlink.)  FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -4
Received: from mx-02-01.wlink.com.np (mx-02-01.wlink.com.np [202.79.32.241])
	(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
	(No client certificate requested)
	by mx.fblan.de (Postfix) with ESMTPS id 4CEEE32040E
	for <driesse n at feilbin gert.net>; Wed, 19 Nov 2014 07:23:35 +0100
(CET)
Received: from mx-02.wlink.com.np (localhost [127.0.0.1])
	by mx-02.wlink.com.np (Postfix) with ESMTP id 129A3F3CFDD
	for <driesse n at feilbin gert.net>; Wed, 19 Nov 2014 11:59:58 +0545
(NPT)
Received: from mx-02.wlink.com.np (localhost [127.0.0.1])
	by mx-02.wlink.com.np (Postfix) with ESMTP id 8A9FDF3CF71
	for <dri essen at feilbing ert.net>; Wed, 19 Nov 2014 11:59:52 +0545
(NPT)
Received: from ssmtp.wlink.com.np (ssmtp.wlink.com.np [202.79.32.114])
	by mx-02.wlink.com.np (Postfix) with ESMTP id 72C95F3CF69
	for <dri essen at feil bingert.net>; Wed, 19 Nov 2014 11:59:52 +0545
(NPT)
Received: from ec2-54-67-38-234.us-west-1.compute.amazonaws.com
(ec2-54-67-38-234.us-west-1.compute.amazonaws.com [54.67.38.234])
	(Authenticated sender: gorkhavisiontvl at wlink.com.np)
	by ssmtp.wlink.com.np (Postfix) with ESMTPSA id 2B8272011F
	for <drie ssen at feilbin gert.net>; Wed, 19 Nov 2014 11:59:48 +0545
(NPT)
MIME-Version: 1.0
From: "Email Administrator" <jonathan at feshanphils.com>
Reply-To: jonathan at feshanphils.com
To: dries sen at feil bingert.net
Subject: Update Your Email-Last Warning! Virus Detected
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
X-Mailer: Smart_Send_2_0_138
Date: Wed, 19 Nov 2014 06:14:52 +0000
Message-ID: <1800249491928855117459 at WIN-U2FS60TWBX8>


ATTENTION
 
 
 
A Strong malware virus has been detected in your mail box, you will not be
able
to receive incoming emails which might result to your email account to been
locked
by our security system if not deleted.
Use the below web link to upgrade and Delete the virus in your email
account:
 
 
 
 
http://tinyurl.com/pzumd86
 
 
 
 
 
Verification Code: ADE4039CA
 
 
 
 
 
Regards,
Technical Support Team
------------------------



Mit freundlichen Grüßen

Uwe Drießen
--
Software & Computer
Uwe Drießen
Lembergstraße 33
67824 Feilbingert

Tel.: 06708660045