Anyone from Prodigy or L3 listening? (W32/Yaha Complaint)

[Richard Forno]

Apologies for posting this to NANOG, but I am in a mood, and it's difficult
to reach anyone at Prodigy.

For the past several weeks, every other day, I've received 10 messages sent
through Prodigy's mail servers, all of which appear to be a Win32/Yaha
message. (http://www.ravantivirus.com/virus/showvirus.php?v=101)

Today I got 10 more messages, dated 18 August 2002, which is the same date
appearing on dozens of other messages over the past few weeks.

I'm posting this to NANOG in the hopes that someone on the list who works
for Prodigy and/or L3 (the dialup provider) can ruffle some feathers on this
for corrective action.

The header of the message appears below - note that in other cases, I've
received messages from "this person" from pimoutX-ext.prodigy.net, where X
is the number (1-5) of their mail server.

And, yes, as of today, I've added this latest crap to my filters.  :)

Thanks in advance, and again, sorry for the Sunday afternoon complaint.

Cheers

rick



Return-Path: <jfay291@prodigy.net>
Received: (from daemon@localhost)
    by web1.nidhog.com (8.12.5/8.11.3) id g7IJdt5l046337
    for rforno@infowarrior.org.CLEAN; Sun, 18 Aug 2002 15:39:55 -0400 (EDT)
    (envelope-from jfay291@prodigy.net)
Received: from pimout5-ext.prodigy.net (pimout5-ext.prodigy.net
[207.115.63.98])
    by web1.nidhog.com (8.12.5/8.11.3) with ESMTP id g7IJdsuQ046332
    for <rforno@infowarrior.org>; Sun, 18 Aug 2002 15:39:54 -0400 (EDT)
    (envelope-from jfay291@prodigy.net)
Received: from smtp.prodigy.net
(dialup-65.58.64.224.Dial1.Indianapolis1.Level3.net [65.58.64.224])
    by pimout5-ext.prodigy.net (8.11.0/8.11.0) with SMTP id g7IJdcf286002
    for <rforno@infowarrior.org>; Sun, 18 Aug 2002 15:39:38 -0400
Message-Id: <200208181939.g7IJdcf286002@pimout5-ext.prodigy.net>
From: JANE  FAY<jfay291@prodigy.net>
To: rforno@infowarrior.org
Subject: Fw: Enjoy Romantic life !
Date: Sun,18 Aug 2002 14:37:29 PM
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary=voeuogm