Hi Sergio, this sounds like the Blaster work (i think it was blaster, or one of those that came out in the beginning of september). Basically, it has its own smtp engine (on the infected pc of the user), and sends out emails to everyone (emails found in his address book or in text files parsed from his drive), and the FROM address is randomly chosen from the users address book - so basically, 99% chance that if the email is addressed from [EMAIL PROTECTED], then SOMEUSER did NOT send it.
Marcin -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sergio V�zquez Sent: Friday, October 24, 2003 10:45 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Imail spam or virus? Hi all I am using an Imail 8.01 professional imail server and I have one question. some external users receive 30 or 40 mails from my users who say they haven�t writen like those: No message body: [EMAIL PROTECTED] Original message follows. The header is Date: Thu, 23 Oct 2003 12:24:55 +0200 Message-Id: <[EMAIL PROTECTED]> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii From: "Postmaster" <[EMAIL PROTECTED]> Sender: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: Undeliverable Mail X-Mailer: <SMTP32 v8.01> Status: U X-UIDL: 362406964 �Is it a worm,virus or similar? �What can i do on the imail server if i can? This is all the information i have. I haven�t found anything in KB thanks Sergio [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
