Yes this virus has been going around for the last couple weeks and we
receievd several through our mail server until I added a rule three days ago
that scans the body of the message and delets any message with that URl in
the body. It's a crude rule, but none-the-less works. So far, no mor virus
laden emails of this variety have made it through our mail server.
Anthony
----- Original Message -----
From: "David V. Brenner" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, December 20, 1999 8:13 PM
Subject: RE: [IMail Forum] anyone else get hit by this
stuart.messagemates.com
> Several of my customers have infected machines and other customers have
> received this garbage and have been smart enough to trash it.
>
> What I find interesting is that a) the headers of these messages do not
> include the usual client or platform information associated with the
sender
> and b) the mail appears to go directly from the sender's machine to the
> recipient.
>
> Could this 68K virus have enough built-in SMTP functionality to make
direct
> contact with the recipient's server? The program is definitely
constructing
> headers (this can be seen in the text of the executable), but could it be
> playing SMTP gateway as well?
>
> ___________________________________
> David V. Brenner - [EMAIL PROTECTED]
> International Services Network Corporation
> http://www.cport.com
>
>
>
>
> : -----Original Message-----
> : From: [EMAIL PROTECTED]
> : [mailto:[EMAIL PROTECTED]]On Behalf Of Sales
> : Sent: Thursday, December 16, 1999 4:18 PM
> : To: [EMAIL PROTECTED]
> : Subject: [IMail Forum] anyone else get hit by this
> : stuart.messagemates.com
> :
> :
> : we got slammed by some assh@le(s) sending somehow thru the servers a
email
> : with attached files with different names.
> : Some of the headers showed the emails coming from one of our internal
> : machines but with the wrong
> : mailserver name.
> : Others showed it coming from the wireless-isp list, intrex.net and other
> : seemingly forged headers.
> : said the emails were sent by our support department.
> : people suck sometimes.
> :
> :
> : Please visit http://www.ipswitch.com/support/mailing-lists.html
> : to be removed from this list.
> :
>
> Please visit http://www.ipswitch.com/support/mailing-lists.html
> to be removed from this list.
>
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
