In outlook, when you have the message open, View>Options and in the window
pane you will see the full headers, just copy and paste.
Craig.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Ed Chabot
Sent: Tuesday, August 21, 2001 2:41 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS
How did you get all that info in the email from Declude? Mine only states
the following:
Declude Virus caught a virus with the subject "Snowhite and the Seven
Dwarfs - The REAL story!"
from <> to: [EMAIL PROTECTED]
The spool file name is Daf9d0f8.SMD.
Ed Chabot
The Marlin Firearms Company
100 Kenna Drive
North Haven, CT 06473
(203)985-3254
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Craig Gittens
Sent: Tuesday, August 21, 2001 2:12 PM
To: Declude. Virus List
Subject: [Declude.Virus] FW: WARNING: YOU MAY HAVE A VIRUS
Guys,
I have one domain on my Imail server running declude. My sales team has
received multiple emails like the one below. Can anyone tell me why
declude/Imail would do this? %localhost% is only supposed to send a
sunbeach.net result. In addition the sales account is a valid account and
not an alias. so why did mail destined for [EMAIL PROTECTED] get in his
mailbox?
Confused,
Craig.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, August 21, 2001 1:45 PM
To: [EMAIL PROTECTED]
Subject: WARNING: YOU MAY HAVE A VIRUS
Date: Tue, 21 Aug 2001 13:44:59 -0400
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
From: <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: WARNING: YOU MAY HAVE A VIRUS
X-Mailer: <IMail v6.05>
X-UIDL: 883329720
Status: U
The Virus software on bicoltd.com has reported that you sent
a virus with the subject "flight comfirmation" to:
[EMAIL PROTECTED]
The E-mail containing the virus has been quarantined on our servers to
prevent further damage.
The infected filename is "flight comfirmation.doc.pif", and the virus name
was " the W32/SirCam@MM virus !!!"
Armed with this information, you can try to clean it by updating your virus
scanner.
If you lack one, you can go to
http://www.symantec.com/avcenter/tools.list.html
and download a removal tool if it is available for your virus. You can learn
more
about the virus at http://www.symantec.com/avcenter/vinfodb.html
When a virus is intercepted, the recipient, the sender and the postmaster
for
either domain is notified automatically. There is no need for you to take
any
action.
Team SunBeach
D9d8b10e.SMD
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
