It's probably a virus called Bug Bear. I've seen a fair bit of it over the last few days and there's a free utility to clean it up on Symantec's website at http:[EMAIL PROTECTED]
This virus can create fictional email identities using your address book and then a fictional address at a real domain. Like Tom Fitness or James Richardson for example. I have the catchall accounts for 7 domains at work at I have gotten a truly mind boggling number of emails from antivirus gateways telling the user 'qwer3121' etc that they have a virus... Just be thankful you don't have a network printer - one of my sites spat out 10 reams worth of junk characters before the users phoned! Cheers, - Tom Stuey Roberts wrote: > Hey Rick, stuey again, just trying to clarrify the situation. My email > address is [EMAIL PROTECTED], and that is what i sighned in as, > i hope that no-one is targeting me.... > > >> From: Rick White <[EMAIL PROTECTED]> >> Reply-To: [EMAIL PROTECTED] >> To: [EMAIL PROTECTED] >> Subject: Re: VIRUS ALERT. >> Date: Wed, 9 Oct 2002 05:51:21 -0700 (PDT) >> >> The last one I got came from this address. >> "Stuey Roberts" <[EMAIL PROTECTED]> >> I have never heard of this bloke but the email was deffinatly one I >> had read before. >> Later. >> Rick White. >> >> --- "Richard Webb" <[EMAIL PROTECTED]> wrote: >> >this is the header on mine, your most probably right james. Your other >> >headers say jupiter.linuxengine.net this ones from ihug. >> > >> >Return-Path: <[EMAIL PROTECTED]> >> >Received: from mta03bw.bigpond.com ([192.168.115.88]) by >> > mailms6.email.bigpond.com (Netscape Messaging Server 4.15 >> > mailms6 Apr 29 2002 13:22:02) with ESMTP id H3NUHP00.A6D for >> > <[EMAIL PROTECTED]>; Tue, 8 Oct 2002 21:27:25 +1000 >> >Received: from new-smtp1.ihug.com.au ([144.135.24.81]) by >> > mta03bw.bigpond.com (Netscape Messaging Server 4.15 mta03bw Jul >> > 16 2002 22:47:55) with SMTP id H3NUHN00.CJW; Tue, 8 Oct 2002 >> > 21:27:23 +1000 >> >Received: from new-smtp1.ihug.com.au ([203.109.250.27]) by >> >bwmam05.mailsvc.email.bigpond.com(MailRouter V3.0n 44/10017711); 08 >> Oct 2002 >> >21:27:23 >> >Received: from p285-tnt7.syd.ihug.com.au (funkay) [203.173.145.31] >> > by new-smtp1.ihug.com.au with smtp (Exim 3.22 #1 (Debian)) >> > id 17ysL4-0007qL-00; Tue, 08 Oct 2002 21:15:51 +1000 >> >From: James Fitness <[EMAIL PROTECTED]> >> >Subject: Re: Can we stop the JUNK MAIL? >> >MIME-Version: 1.0 >> >Content-Type: multipart/mixed; boundary="----------Q71ZFUGZ1GBABD" >> >Message-Id: <[EMAIL PROTECTED]> >> >Bcc: >> >Date: Tue, 08 Oct 2002 21:15:51 +1000 >> > >> > >> >----- Original Message ----- >> >From: "James Fitness" <[EMAIL PROTECTED]> >> >To: <[EMAIL PROTECTED]> >> >Sent: Wednesday, October 09, 2002 9:52 PM >> >Subject: Re: VIRUS ALERT. >> > >> > >> >> I have virus scanned all my PC's and cannot find anything.... >> >> >> >> I have updated the antivirus software on the Mial server >> >> (even though it was only a week or so since I did it last) >> >> >> >> I think that maybe it has actually come from someone elses >> >> PC... with altered headers to make it look like it came >> >> from me.... there are a lot of them getting around at the >> >> moment that do things like that... >> >> >> >> regards >> >> James >> >> >> >> >> >> >> >> >> >> >> >> Rick White wrote: >> >> >> >> > Hi there guys. >> >> > I have just had a old email resent to direct from James F >> >> > It had this attachment at the end of it.(Attached File: >> nsl2.txt.scr >> >Download ) >> >> > >> >> > I would not open it if you get it. >> >> > If you get it delete it as his computer probably has just been >> hit with >> >a virus or some thing >> >> > >> >> > _____________________________________________________________ >> >> > Get Your free Ozdat Email Account >> >> > ---> http://www.ozdat.com >> >> > >> >> > _____________________________________________________________ >> >> > Select your own custom email address for FREE! Get >> [EMAIL PROTECTED] >> >w/No Ads, 6MB, POP & more! >> http://www.everyone.net/selectmail?campaign=tag >> >> > >> >> >> >> -- >> >> ----------------------------------------------------------- >> >> >> >> James Fitness >> >> Director >> >> Data Scribe Australia Pty Ltd >> >> http://www.datascribe.com.au >> >> Computers, Peripherals and Supplies >> >> >> >> >> >> Ozdat Online >> >> Webmaster >> >> http://www.ozdat.com >> >> >> >> >> > >> >> _____________________________________________________________ >> Get Your free Ozdat Email Account >> ---> http://www.ozdat.com >> >> _____________________________________________________________ >> Select your own custom email address for FREE! Get [EMAIL PROTECTED] >> w/No Ads, 6MB, POP & more! >> http://www.everyone.net/selectmail?campaign=tag >> > > > > > _________________________________________________________________ > Join the world's largest e-mail service with MSN Hotmail. > http://www.hotmail.com > > --membersozdat------------------------------------------------------- > OZDAT Mailing List Please Note:- > Send (un)subscribe requests to [EMAIL PROTECTED] > Send submissions to [EMAIL PROTECTED] > No unauthorised redistribution of this email > http://www.ozdat.com/ozdatonline/index.htm > http://www.ozdat.com/ozdatonline/listindex.html > http://www.mail-archive.com/[email protected]/ > --------------------------------------------------------------------- > --membersozdat------------------------------------------------------- OZDAT Mailing List Please Note:- Send (un)subscribe requests to [EMAIL PROTECTED] Send submissions to [EMAIL PROTECTED] No unauthorised redistribution of this email http://www.ozdat.com/ozdatonline/index.htm http://www.ozdat.com/ozdatonline/listindex.html http://www.mail-archive.com/[email protected]/ ---------------------------------------------------------------------
