As of March 15, 2004 3:55 AM PST TrendLabs has declared a Yellow Alert to control the spread of PE_BAGLE.P.
The above virus has a variable that puts the domain of the receiver in the email to make it look more official. Barbara -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Heath Sent: Wednesday, March 17, 2004 9:32 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Strange e-mail, spam/virus? Ok, this is odd, this e-mail went to one of my users, got through ASSP so it doesnt have a illegal attachment, it does have a .zip though. As anyone seen these messages? Thanks in advance! the OTHER Scott ==================Message Below============================ Recieved From ASSP-nospam [127.0.0.1] by mail.ourdomain.com #comment date time usual stuff here Recieved From 192.168.1.9 ([192.168.1.9] helo=av.) by ASSP-nospam Recieved (from gary [68.93.249.72]) by av. (NAVGW) for [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Important notify about your e-mail account. From: [EMAIL PROTECTED] #normal envelope stuff Dear user of ourdomain.com, Your e-mail account has been temporary disabled because of unauthorized access. Pay attention on attached file. Best wishes, The ourdomain.com team. URL Attachement: DELETED013.TXT ========================================= Below is the lookup from Arin: CustName: PPPoX Pool bras2.rcsntx Address: 2701 W 15th ST PMB 236 City: Plano StateProv: TX PostalCode: 75075 Country: US RegDate: 2003-12-09 Updated: 2003-12-09 NetRange: 68.93.240.0 - 68.93.255.255 CIDR: 68.93.240.0/20 NetName: SBC068093240000031209 NetHandle: NET-68-93-240-0-1 Parent: NET-68-88-0-0-1 NetType: Reassigned Comment: For Policy Abuse issues, contact: [EMAIL PROTECTED] Comment: For Technical issues, contact: [EMAIL PROTECTED] RegDate: 2003-12-09 Updated: 2003-12-09 TechHandle: ZS44-ARIN TechName: IPAdmin-SBIS TechPhone: +1-866-937-3664 TechEmail: [EMAIL PROTECTED] OrgAbuseHandle: ABUSE6-ARIN OrgAbuseName: Abuse - Southwestern Bell Internet OrgAbusePhone: +1-877-722-3755 OrgAbuseEmail: [EMAIL PROTECTED] OrgNOCHandle: SUPPO-ARIN OrgNOCName: Support - Southwestern Bell Internet Services OrgNOCPhone: +1-888-212-5411 OrgNOCEmail: [EMAIL PROTECTED] OrgTechHandle: IPADM2-ARIN OrgTechName: IPAdmin-SBIS OrgTechPhone: +1-888-212-5411 OrgTechEmail: [EMAIL PROTECTED] (thanks Scott for DNSstuff.com) To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
