Anyone from Prodigy or L3 listening? (W32/Yaha Complaint)

Sun Aug 18 20:25:16 UTC 2002

Apologies for posting this to NANOG, but I am in a mood, and it's difficult
to reach anyone at Prodigy.

For the past several weeks, every other day, I've received 10 messages sent
through Prodigy's mail servers, all of which appear to be a Win32/Yaha
message. (http://www.ravantivirus.com/virus/showvirus.php?v=101)

Today I got 10 more messages, dated 18 August 2002, which is the same date
appearing on dozens of other messages over the past few weeks.

I'm posting this to NANOG in the hopes that someone on the list who works
for Prodigy and/or L3 (the dialup provider) can ruffle some feathers on this
for corrective action.

The header of the message appears below - note that in other cases, I've
received messages from "this person" from pimoutX-ext.prodigy.net, where X
is the number (1-5) of their mail server.

And, yes, as of today, I've added this latest crap to my filters.  :)

Thanks in advance, and again, sorry for the Sunday afternoon complaint.

Cheers

rick

Return-Path: <jfay291 at prodigy.net>
Received: (from daemon at localhost)
    by web1.nidhog.com (8.12.5/8.11.3) id g7IJdt5l046337
    for rforno at infowarrior.org.CLEAN; Sun, 18 Aug 2002 15:39:55 -0400 (EDT)
    (envelope-from jfay291 at prodigy.net)
Received: from pimout5-ext.prodigy.net (pimout5-ext.prodigy.net
[207.115.63.98])
    by web1.nidhog.com (8.12.5/8.11.3) with ESMTP id g7IJdsuQ046332
    for <rforno at infowarrior.org>; Sun, 18 Aug 2002 15:39:54 -0400 (EDT)
    (envelope-from jfay291 at prodigy.net)
Received: from smtp.prodigy.net
(dialup-65.58.64.224.Dial1.Indianapolis1.Level3.net [65.58.64.224])
    by pimout5-ext.prodigy.net (8.11.0/8.11.0) with SMTP id g7IJdcf286002
    for <rforno at infowarrior.org>; Sun, 18 Aug 2002 15:39:38 -0400
Message-Id: <200208181939.g7IJdcf286002 at pimout5-ext.prodigy.net>
From: JANE  FAY<jfay291 at prodigy.net>
To: rforno at infowarrior.org
Subject: Fw: Enjoy Romantic life !
Date: Sun,18 Aug 2002 14:37:29 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary=voeuogm