Virus Alert
Results 1 to 4 of 4

Thread: Virus Alert

  1. May 19th, 2003, 01:43 PM #1
    Atodini
    Atodini is offline
    Registered User Atodini's Avatar
    Join Date
    Oct 2002
    Location
    Leighton Buzzard
    Posts
    433

    Virus Alert

    I have just received a virus through the e-mail. Nothing unusual in this, it happens periodically. The AV (Norton2003) nailed it so no prob - but Look where the message apparently came from!!!

    Be on your guard guys n gals........

    From: <[email protected]>
    To: <[email protected]>
    Subject: Cool screensaver
    Date: Mon, 19 May 2003 18:31:16 +0100
    Importance: Normal

    If anyones interested, the attachment was called movie28.pif

    The virus it contained was W32.HLLW.Mankx@mm

    John
    Reply With Quote Reply With Quote
  2. May 19th, 2003, 01:58 PM #2
    NooNoo
    NooNoo is offline
    Driver Terrier NooNoo's Avatar
    Join Date
    Dec 2000
    Location
    UK
    Posts
    31,824
    Whats the email header say?
    Reply With Quote Reply With Quote
  3. May 19th, 2003, 02:06 PM #3
    Atodini
    Atodini is offline
    Registered User Atodini's Avatar
    Join Date
    Oct 2002
    Location
    Leighton Buzzard
    Posts
    433
    NooNoo,

    From: [email protected]
    Date: 19 May 2003 18:34:04
    To: [email protected]
    Subject: Cool screensaver


    All information is in the attached file.

    That's all there is.....

    The full properties are as follows: (edited except for senders ip, please remove if you think fit)

    X-Symantec-TimeoutProtection: 0
    X-Symantec-TimeoutProtection: 1
    X-Symantec-TimeoutProtection: 2
    Received: from [XXX.X.XXX.XX] (helo=golf.rb.xcalibre.co.uk)
    by foxtrot.whitburn.xcalibre.co.uk with esmtp (Exim 3.16 #4)
    id 19HoWS-0003DS-00
    for [email protected]; Mon, 19 May 2003 18:34:04 +0100
    Envelope-to: [email protected]
    Received: from [XX.XX.XXX.XXX] (helo=mf-prod2.namesecure.com)
    by golf.rb.xcalibre.co.uk with smtp (Exim 3.34 #3)
    id 19HoUi-00037K-00
    for [email protected]; Mon, 19 May 2003 18:32:16 +0100
    Received: (qmail 15995 invoked by uid 89); 19 May 2003 17:29:06 -0000
    Delivered-To: [email protected]
    Received: (qmail 15049 invoked from network); 19 May 2003 17:27:50 -0000
    Received: from acbefcb3.ipt.aol.com (HELO OWNER-HEYJZYHZ8) (172.190.252.179)
    by mf-prod2.namesecure.com with SMTP; 19 May 2003 17:27:50 -0000
    From: <[email protected]>
    To: <[email protected]>
    Subject: Cool screensaver
    Date: Mon, 19 May 2003 18:31:16 +0100
    Importance: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2600.0000
    X-MSMail-Priority: Normal
    X-Priority: 3 (Normal)
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="CSmtpMsgPart123X456_000_0030D20C"
    Message-Id: <[email protected]>
    X-UIDL: N))"!KCh!!Q4+!!+`X"!
    Status: RO
    Now where did I leave my Lump Hammer?

    "I thought I was wrong once" - "But I was wrong"
    Reply With Quote Reply With Quote
  4. May 19th, 2003, 03:05 PM #4
    geoscomp
    geoscomp is offline
    Registered User geoscomp's Avatar
    Join Date
    Apr 2002
    Location
    Minnesota
    Posts
    2,340
    more about it here

    and here
    Last edited by geoscomp; May 19th, 2003 at 03:08 PM.
    Reply With Quote Reply With Quote
« Previous Thread | Next Thread »

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

Forum Rules