This list is a start: http://www.slipstick.com/outlook/esecup.htm#attsec
-- Brett Rosselle Systems Administrator Brightpoint North America 317.707.2525 Tel 317.707.2397 Fax [EMAIL PROTECTED] -----Original Message----- From: Patrick Scribner [mailto:[EMAIL PROTECTED] Sent: Monday, July 26, 2004 3:46 PM To: Exchange Discussions Subject: RE: A new e-mail virus? That would be why I don't let in any .com, .exe through the mail system. There's a whole list of extensions you probably should block. -----Original Message----- From: [EMAIL PROTECTED] on behalf of Sabo, Eric Sent: Mon 7/26/2004 9:28 AM To: Exchange Discussions Cc: Subject: RE: A new e-mail virus? I got two with attachment (document.exe and message.com), outlook blocked it. But Trendmicro didn't detect it. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Fretz Sent: Monday, July 26, 2004 11:18 AM To: Exchange Discussions Subject: RE: A new e-mail virus? It's not a virus because nothing is attached and there are no obvious links or other active content in the e-mail message. Therefore, nothing triggers Norton AV. Also, the internet headers are stripped out, probably because the message has been made to look like it came from inside the organization. If viruses can masquerade as internal messages, what's stopping legitimate criminals? Eric Fretz L-3 Communications ComCept Division 2800 Discovery Blvd. Rockwall, TX 75032 tel: 972.772.7501 fax: 972.772.7510 -----Original Message----- From: Sabo, Eric [mailto:[EMAIL PROTECTED] Sent: Monday, July 26, 2004 10:03 AM To: Exchange Discussions Subject: RE: A new e-mail virus? Is your AV detecting this virus? If so what are you using? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Sullivan Sent: Monday, July 26, 2004 10:59 AM To: Exchange Discussions Subject: RE: A new e-mail virus? Yhea... My Help Desk just received 5-6 calls about this in the past 30 minutes. -----Original Message----- From: Neil Doody [mailto:[EMAIL PROTECTED] Sent: Monday, July 26, 2004 10:59 AM To: Exchange Discussions Subject: RE: A new e-mail virus? HAHA, just got off the phone to one of our users with this exact message. Must be doing the circulation right now. > -----Original Message----- > From: Eric Fretz [mailto:[EMAIL PROTECTED] > Sent: 26 July 2004 15:43 > To: Exchange Discussions > Subject: A new e-mail virus? > > This morning I received a undeliverable message report with the title, > "RETURNED MAIL: SEE TRANSCRIPT FOR DETAILS". This is not unusual, so I > opened the message and looked at the transcript. It looks like the > message was sent from the System Administrator to a non-existant user > in my domain. > I clicked on the "Resend" button so I could see the original message that > was sent and the following text was in the message: > > ------------------------------------------------------- > Dear user [EMAIL PROTECTED], > > Your account was used to send a huge amount of junk e-mail during this > week. Most likely your computer was infected by a recent virus and now > runs a > hidden proxy server. > > We recommend that you follow instructions in order to keep your computer > safe. > > Have a nice day, > comceptinc.com technical support team. > ------------------------------------------------------- > > I have never seen a System Administrator generated message like this. Has > anyone else seen something like this? > > Thanks! > > > Eric Fretz > > L-3 Communications > ComCept Division > 2800 Discovery Blvd. > Rockwall, TX 75032 > tel: 972.772.7501 > fax: 972.772.7510 > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/cgi-< BR>>bin/lyris.pl?enter=exchange&text_mode=&lang=english > To unsubscribe send a blank email to [EMAIL PROTECTED] > dl.sparklist.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: Jupitermedia > Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang =english To unsubscribe send a blank email to %%email.unsub%% Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. .+--xm ,)r( \Ùy'iÇ)l+-rrÊW{jxm^zx%Sì &ÞiZGj)mWrunHgeX&!jx .+-iÙW(+ ^g(:.Ëmj,fj)iy'-Æ&byØ g+ "r Ojy*.^+5Mz>Wr[z^zf],*.mri^w _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
