Please name of Worm, our Internet provider say that is greencode and
suggested us to disconnected some of our servers,,,we have ALL MS patches in
those servers how could tha tbe?!~
--er
-----Original Message-----
From: Ewins, James [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 9:26 AM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
You may wish to snip the stuff from the bottom of this thread before
replying folks, it seems to be upsetting people.
JDE
-----Original Message-----
From: Ewins, James [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 5:18 PM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
I also received one from you, or the address. Open relay time?
JDE
-----Original Message-----
From: Ryan Malayter [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 5:18 PM
To: Exchange Discussions
Subject: RE: New Virus / Worm ??
AFAIK, this infected message didn't come from me. It has my return address,
but as you can see, the sending server is mail.stadacona.ca.
We block all executables at the server, and I started getting bounce
messages about an hour before I was even in the office.
Also, nobody I've every actually email directly has bounced me a message,
and I'm not seeing any outbound port 25 traffic from any machine other than
my mail server.
Can anyone confirm that this virus forges return addresses? The antiviral
vendors appear to be behind on this one...
-ryan-
-----Original Message-----
From: John Matteson [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, September 18, 2001 10:32 AM
To: Exchange Discussions
Subject: New Virus / Worm ??
I received an E-mail from a person that I didn't know this morning, and the
subject line was a lot of nonsense characters. Using Outlook 2000 I
highlighted it and it kicked off the attachment, which opened Media Player
and tried to play a file, but got a content error.
Here is the header from the message as it was received. Anyone have any
ideas about this?
<s>
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe: mailto:[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
