seems i got a possible spam / virus email from lexusownersclub
X-Apparently-To: <nobody>@yahoo.com via 209.191.85.7; Wed, 03 May 2006 05:55:29 -0700 X-Originating-IP: [70.87.52.18] Return-Path: <nobody@nemesis.icocndns.com> Authentication-Results: mta150.mail.scd.yahoo.com from=us.lexusownersclub.com; domainkeys=neutral (no sig) Received: from 70.87.52.18 (EHLO nemesis.icocndns.com) (70.87.52.18) by mta150.mail.scd.yahoo.com with SMTP; Wed, 03 May 2006 05:55:28 -0700 Received: from nobody by nemesis.icocndns.com with local (Exim 4.52) id 1FbGsn-00026I-5C for go_jesse@yahoo.com; Wed, 03 May 2006 12:55:09 +0000 To: <nobody>@yahoo.com Subject: From lexusownersclub.com ( Lexus Owners Club (USA) Forums ) MIME-Version: 1.0 Content-type: text/plain; charset="iso-8859-1" From: "Lexus Owners Club (USA) Forums" <matthew.mcnally@us.lexusownersclub.com> X-Priority: 3 X-Mailer: IPB PHP Mailer Message-Id: <E1FbGsn-00026I-5C@nemesis.icocndns.com> Date: Wed, 03 May 2006 12:55:09 +0000 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - nemesis.icocndns.com X-AntiAbuse: Original Domain - yahoo.com X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12] X-AntiAbuse: Sender Address Domain - nemesis.icocndns.com X-Source: X-Source-Args: X-Source-Dir: Content-Length: 129 We have made a small tool for our site, I think you will guess what to do with it.... http://lexusownersclub.com/loadadv771.exe
I wouldn't try running the executable, but my guess is your website is hacked.