[FZWG]

Appreciate some help.

The following message was received (actual user name is Xed out):

----------

From: "System Anti-Virus Administrator" <[email protected]>
To: <[email protected]>
Sent: Wednesday, April 07, 2004 3:39 PM
Subject: virus found in sent message "Mail Delivery (failure
[email protected])"

>
> Attention: [email protected]
>
>
> A virus was found in an Email message you sent.
> This Email scanner intercepted it and stopped the entire message
> reaching its destination.
>
> The virus was reported to be:
>
> Worm.SomeFool.P
>
>
> Please update your virus scanner or contact your IT support
> personnel as soon as possible as you have a virus on your system.
>
>
> Your message was sent with the following envelope:
>
> MAIL FROM: [email protected]
> RCPT TO: [email protected]
>
> ... and with the following headers:
>
> ---
> MAILFROM: [email protected]
> Received: from unknown (HELO lists.oasis-open.org) (4.10.72.211)
> by mail.oasis-open.org with SMTP; 7 Apr 2004 20:39:03 -0000
> From: [email protected]
> To: [email protected]
> Subject: Mail Delivery (failure [email protected])
> Date: Wed, 7 Apr 2004 15:55:10 -0500
> MIME-Version: 1.0
> Content-Type: multipart/related;
> type="multipart/alternative";
> boundary="----=_NextPart_000_001B_01C0CA80.6B015D10"
> X-Priority: 3
> X-MSMail-Priority: Normal
>
>
> ------------

Any ideas of what in the world this is all about??

Thanks for your help.

 

[Nok1]

Looks like a typical email sent out by a worm... Don't worry about it. There is also probaly a 36-112kb attachment with the email. Just a note, it's not wise to open emails from unknown people when you see there is an attachment .

 

[FZWG]

Thanks for the reply.

There was no attachment with the email.

Ran Trend Micro HouseCall online, and it found WORM_BAGLE.U
AVG came out clean.

 

[starchild]

There's a lot of strange emails going around now.

I've gotten ones like that, that say I sent an email and it is being returned (I don't know if it says I sent a virus, I don't open it)

I also get ones with a name like "Mary McGuire" or something and subject RE: your account, or "updating my email address" They all seem to be 2K in size, and I just delete them since I don't know the name.

~ Carrie

 

[FZWG]

Some kind of a worm, from what I've read...

So far, so good.

Did a couple of online virus scans, and they are all coning out clean.

Thanks for the info.

 

[Nok1]

Did you fully remove the virus?

Run Stinger just in case there - http://vil.nai.com/vil/stinger/

Best of luck .

 

[FZWG]

So far, so good. If something shows up again, will give Stinger a whirl.

Thanks much for the info.

 

[Nok1]

:up: