[SC-Help] Re: Is this for real?

[Brian (SnSR)]

BMW wrote:
> This seems screwy to me BUT no attempt is made to steal my personal 
> info. . . AND yet my account is still working!

This is a forgery. That attempts to infect your computer with WORM_MYTOB.EJ

> 
> Help me read this header it looks like emc.emc.com.tw then received this 
>  from spamcop.net (192.168.33.104) (an unroutable LAN address), then 
> emc.emc.com.tw. (192.168.10.1) (another unroutable LAN address) sent it 
> to emclog.emc.com.tw, then emclog.emc.com.tw (192.72.220.9) sent it to 
> blade5.cesmail.net (the spamcop mail server). . . I did read this right, 
> RIGHT?
> 
> Received today:
> ======================================================
> Return-Path: <webmaster at spamcop.net>    *Forged
> Delivered-To: spamcop-net-rwcs at spamcop.net
> Received: (qmail 15232 invoked from network); 14 Jun 2005 21:12:03 -0000
> Received: from unknown (192.168.1.101)   *Internal Spamcop handling
>   by blade5.cesmail.net with QMQP; 14 Jun 2005 21:12:03 -0000
> Received: from emclog.emc.com.tw (192.72.220.9)  *Origin of worm infested email
>   by mailgate.cesmail.net with SMTP; 14 Jun 2005 21:12:02 -0000
> Received: from emc.emc.com.tw (emc [192.168.10.1])  *Possible forgery, possible trojaned computer
>     by emclog.emc.com.tw (8.12.10/8.12.10) with ESMTP id j5EL7sDT021684
>     for <rwcs at spamcop.net>; Wed, 15 Jun 2005 05:07:54 +0800 (CST)
> Received: from spamcop.net ([192.168.33.104])  *Forged
>     by emc.emc.com.tw (8.11.6/8.11.4) with ESMTP id j5EL9Qg14912
>     for <rwcs at spamcop.net>; Wed, 15 Jun 2005 05:09:27 +0800 (CST)
> Message-Id: <200506142109.j5EL9Qg14912 at emc.emc.com.tw>