[Sasquatch]

Does anyone know how the [email protected]!zip worm virus works? That is, if someone gets this virus, does it then copy and send out subsequent emails to people who are in your Address book/Contact list?

The reason I am asking is that I received an email yesterday from someone I don't know that had an attachment on it that was labeled "Norton Antivirus Deleted1.txt". I took a chance and opened it after investigating the email address. In Notepad it said, \"Norton AntiVirus removed the attachment: pub_document.zip. The attachment was infected with the [email protected]!zip virus.\"

What's confusing is that 1) I don't use Norton, so it didn't get deleted by my antivirus program; 2) when I emailed the sender's office, they claim that they didn't send it to me, and that they don't know who I am.

How could they have sent me the email if my email address wasn't in their address book?

 

[RandyG]

http://securityresponse.symantec.com/avcenter/venc/data/[email protected] will give you more info than you will ever know.

key points to cover your questions . . .

The From field is spoofed. The virus sends to people in your address book, and it sends them from email addresses in your address book, as well. That means that someone out there has your email address, and theirs, and that someone got infected.

as to the norton attachment, I suppose it's possible that your service provider is scanning mails??

 

[Sasquatch]

I've figured it out. A friend of mine happened to have this other person's email address along with mine and he apparently got the virus on his new PC.

Thanks.