[SixClub] (no subject)

[mikea]

On Tue, May 10, 2011 at 08:53:31AM -0500, Richard J. Fiero II  W5TFW wrote:
> WADE !

He didn't send it; someone in Europe did: 

: Received: from host.qsl.net (host [127.0.0.1])
:         by mailman.qth.net (Postfix) with ESMTP id 136D88A652;
:         Tue, 10 May 2011 09:51:56 -0400 (EDT)
: X-Original-To: sixclub at mailman.qth.net
: Delivered-To: sixclub at mailman.qth.net
: Received: from nm22-vm0.access.bullet.mail.mud.yahoo.com
:         (nm22-vm0.access.bullet.mail.mud.yahoo.com [66.94.236.137])
:         by mailman.qth.net (Postfix) with SMTP id 7137E8A64C
:         for <sixclub at mailman.qth.net>; Tue, 10 May 2011 09:51:50 -0400 (EDT)
: Received: from [66.94.237.194] by nm22.access.bullet.mail.mud.yahoo.com with
:         NNFMP; 10 May 2011 13:51:50 -0000
: Received: from [66.94.237.124] by tm5.access.bullet.mail.mud.yahoo.com with
:         NNFMP; 10 May 2011 13:51:50 -0000
: Received: from [127.0.0.1] by omp1029.access.mail.mud.yahoo.com with NNFMP;
:         10 May 2011 13:51:50 -0000
: X-Yahoo-Newman-Property: ymail-3
: X-Yahoo-Newman-Id: 95981.90320.bm at omp1029.access.mail.mud.yahoo.com
: Received: (qmail 79031 invoked by uid 60001); 10 May 2011 13:51:49 -0000
: Message-ID: <824158.95188.qm at web81301.mail.mud.yahoo.com>
: X-YMail-OSG: 6zIDW10VM1mmKyvNBTVvsEKMA17paU2WFYcST0C0xFWONe4
:         7PM0XZC0J_WWI08oR15YQ5ZqVdtEI.ZBPuCCU7J6WNF.9n6BMpmPyrcgkL8k
:         ymnjgagH2qZe6yNhpZ4NEucK3lqeYjzrNp5QMN1PBPkalkIAlT_51zYcJi9y
:         XZeYFc10mON4IvBLiYGWL1Zy4l5KHpRee25GIfMjpj0Gah5hWMu6UMYmzGGs
:         DecItxukjewuNC7HsLabM7Ug5Nixdg54ktoL3lAXdMBUo6eZT9w93EJ1GFeZ
:         OtrEfj2eBQlAkjOcaWQC0eXvIE9RtFVPxygU52.fs3iGXNlMlo8reU8Osu2l
:         LoRLsjbxwAByldhScd5FtzUGZL0Sm9z_bRUjUluN.HntrDSG86lcGgFVUQXd
:         mWYKwEKCERd9XAEjZvJvM03DIGriklOCzBPBH5I_GcrC4mIe7n53G9dF8F5r
:         YawU7M2bUtnOxvEkyThIC2xmF
: Received: from [89.81.34.99] by web81301.mail.mud.yahoo.com via HTTP;
:         Tue, 10 May 2011 06:51:49 PDT
: X-Mailer: YahooMailWebService/0.8.110.299900
: Date: Tue, 10 May 2011 06:51:49 -0700 (PDT)
: From: Wade Norris <aam6eok at sbcglobal.net>

The very bottom "Received:" line is the key: that IP address (89.81.34.99)
is in a pool assigned to a French ISP. 

Wade, you need to change your password Right Now! If there is any chance
that the password leaked because you have a keylogger on your computer,
then it's time to scrub it down to bare metal and reinstall. 

-- 
Mike Andrews, W5EGO
mikea at mikea.ath.cx
Tired old sysadmin