CODE
X-Apparently-To: <nobody>@yahoo.com via 209.191.85.7; Wed, 03 May 2006 05:55:29 -0700
X-Originating-IP: [70.87.52.18]
Return-Path: <nobody@nemesis.icocndns.com>
Authentication-Results: mta150.mail.scd.yahoo.com from=us.lexusownersclub.com; domainkeys=neutral (no sig)
Received: from 70.87.52.18 (EHLO nemesis.icocndns.com) (70.87.52.18) by mta150.mail.scd.yahoo.com with SMTP; Wed, 03 May 2006 05:55:28 -0700
Received: from nobody by nemesis.icocndns.com with local (Exim 4.52) id 1FbGsn-00026I-5C for go_jesse@yahoo.com; Wed, 03 May 2006 12:55:09 +0000
To: <nobody>@yahoo.com
Subject: From lexusownersclub.com ( Lexus Owners Club (USA) Forums )
MIME-Version: 1.0
Content-type: text/plain; charset="iso-8859-1"
From: "Lexus Owners Club (USA) Forums" <matthew.mcnally@us.lexusownersclub.com>
X-Priority: 3
X-Mailer: IPB PHP Mailer
Message-Id: <E1FbGsn-00026I-5C@nemesis.icocndns.com>
Date: Wed, 03 May 2006 12:55:09 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - nemesis.icocndns.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - nemesis.icocndns.com
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 129
We have made a small tool for our site, I think you will guess what to do with
it....
http://lexusownersclub.com/loadadv771.exe
I wouldn't try running the executable, but my guess is your website is hacked.