Bruce, Thanks for your reply. I figured it was some sort of a trojan, but couldn't seem to locate any info on it.
Art. -----Original Message----- From: Bruce Barnes [mailto:[EMAIL PROTECTED] Sent: Monday, October 04, 2004 8:40 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Unusual file SOPHOS states this is a WORM. Symantec has nothing listed. See http://www.sophos.com/virusinfo/analyses/w32spybotcs.html for more information -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Plato, Art Sent: Monday, October 04, 2004 07:25 To: [EMAIL PROTECTED] Subject: [IMail Forum] Unusual file > Have any of you seen or heard any reference to a file named W32DLLI.exe? Note the I. The reason I ask is that this file keeps showing up in my winnt folder. I have deleted it an average of three times a day since Friday the 24th, as well as the registry entries related to it. When I look at the creation time it seems to coincide pretty closely with spam notifications I have been receiving from AOL and other large ISP's. This makes me believe it's some sort of emailing trojan. FYI, the spam notifications say they are originating from the IP of my server, not one of my customers. The only way I've managed to stop this program is by denying everyone any access to it, including administrator. I'm running W2K on a Dell Poweredge 1750 with Imail 8.13. Any insight would be appreciated. It installs itself in the registry as a printer driver. The server doesn't have any printers configured and of course file sharing is turned off. I have searched Google, Yahoo, Ipswitch, Microsoft, Dell and the Cert site. All searches have come up no matches found. > > TIA, > Art Plato. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
