That would be why I don't let in any .com, .exe through the mail system. There's a
whole list of extensions you probably should block.
-----Original Message-----
From: [EMAIL PROTECTED] on behalf of Sabo, Eric
Sent: Mon 7/26/2004 9:28 AM
To: Exchange Discussions
Cc:
Subject: RE: A new e-mail virus?
I got two with attachment (document.exe and message.com), outlook
blocked it. But Trendmicro didn't detect it.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Eric
Fretz
Sent: Monday, July 26, 2004 11:18 AM
To: Exchange Discussions
Subject: RE: A new e-mail virus?
It's not a virus because nothing is attached and there are no obvious
links or other active content in the e-mail message. Therefore, nothing
triggers Norton AV. Also, the internet headers are stripped out,
probably because the message has been made to look like it came from
inside the organization.
If viruses can masquerade as internal messages, what's stopping
legitimate criminals?
Eric Fretz
L-3 Communications
ComCept Division
2800 Discovery Blvd.
Rockwall, TX 75032
tel: 972.772.7501
fax: 972.772.7510
-----Original Message-----
From: Sabo, Eric [mailto:[EMAIL PROTECTED]
Sent: Monday, July 26, 2004 10:03 AM
To: Exchange Discussions
Subject: RE: A new e-mail virus?
Is your AV detecting this virus? If so what are you using?
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jim
Sullivan
Sent: Monday, July 26, 2004 10:59 AM
To: Exchange Discussions
Subject: RE: A new e-mail virus?
Yhea... My Help Desk just received 5-6 calls about this in the past 30
minutes.
-----Original Message-----
From: Neil Doody [mailto:[EMAIL PROTECTED]
Sent: Monday, July 26, 2004 10:59 AM
To: Exchange Discussions
Subject: RE: A new e-mail virus?
HAHA, just got off the phone to one of our users with this exact
message.
Must be doing the circulation right now.
> -----Original Message-----
> From: Eric Fretz [mailto:[EMAIL PROTECTED]
> Sent: 26 July 2004 15:43
> To: Exchange Discussions
> Subject: A new e-mail virus?
>
> This morning I received a undeliverable message report with the title,
> "RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS". This is not unusual, so
I
> opened the message and looked at the transcript. It looks like the
> message was sent from the System Administrator to a non-existant user
> in my domain.
> I clicked on the "Resend" button so I could see the original message
that
> was sent and the following text was in the message:
>
> -------------------------------------------------------
> Dear user [EMAIL PROTECTED],
>
> Your account was used to send a huge amount of junk e-mail during this
> week. Most likely your computer was infected by a recent virus and now
> runs
a
> hidden proxy server.
>
> We recommend that you follow instructions in order to keep your
computer
> safe.
>
> Have a nice day,
> comceptinc.com technical support team.
> -------------------------------------------------------
>
> I have never seen a System Administrator generated message like this.
Has
> anyone else seen something like this?
>
> Thanks!
>
>
> Eric Fretz
>
> L-3 Communications
> ComCept Division
> 2800 Discovery Blvd.
> Rockwall, TX 75032
> tel: 972.772.7501
> fax: 972.772.7510
>
> _________________________________________________________________
> List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
> Web Interface: http://intm-dl.sparklist.com/cgi-<
BR>>bin/lyris.pl?enter=exchange&text_mode=&lang=english
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> dl.sparklist.com
> Exchange List admin: [EMAIL PROTECTED]
> To unsubscribe via postal mail, please contact us at: Jupitermedia
> Corp.
> Attn: Discussion List Management
> 475 Park Avenue South
> New York, NY 10016
>
> Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang
=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at: Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at: Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang
=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at: Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&;
lang=english
To unsubscribe send a blank email to
%%email.unsub%%
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface:
http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
