Strange message in Inbox

[Todo]

Several users have been receiving this email in their Inbox. This has been getting worse in the last week. They are not sending out an email, but they just receive this. We are using Trend Micro on all of our clients and Mcafee on our servers. plus we have a third party spam filter. Has anyone else been receiving email like this?

Subject: Delivery Notification - Your Account is Suspended For Security Reasons


The message or an attachment did not reach the intended recipient(s).

Subject: Your Account is Suspended For Security Reasons
From: [email protected]
To: [email protected]
Date: Mon, 24 Oct 2005 17:26:10 -0600

Reason: attachment type policy violation (account-info.doc .scr)
Action: quarantine


Subject: Delivery Notification - Your password has been successfully updated


The message or an attachment did not reach the intended recipient(s).

Subject: Your password has been successfully updated
From: [email protected]
To: [email protected]
Date: Mon, 24 Oct 2005 17:26:52 -0600

Reason: attachment type policy violation (account-password.htm .exe)
Action: quarantine

[emr]

Several users have been receiving this email in their Inbox. This has been getting worse in the last week. They are not sending out an email, but they just receive this. We are using Trend Micro on all of our clients and Mcafee on our servers. plus we have a third party spam filter. Has anyone else been receiving email like this?

Subject: Delivery Notification - Your Account is Suspended For Security Reasons


The message or an attachment did not reach the intended recipient(s).

Subject: Your Account is Suspended For Security Reasons
From: [email protected]
To: [email protected]
Date: Mon, 24 Oct 2005 17:26:10 -0600

Reason: attachment type policy violation (account-info.doc .scr)
Action: quarantine


Subject: Delivery Notification - Your password has been successfully updated


The message or an attachment did not reach the intended recipient(s).

Subject: Your password has been successfully updated
From: [email protected]
To: [email protected]
Date: Mon, 24 Oct 2005 17:26:52 -0600

Reason: attachment type policy violation (account-password.htm .exe)
Action: quarantine

It's a virus; Mytob I think. http://www.sophos.com/virusinfo/anal...32mytobef.html

My mail server AV has been bouncing a lot of these for the last week or so.

emr

[Todo]

Thanks for the quick response. I figured it was a virus. So does that mean your mail server is blocking these before they hit exchange. Or are your users receiving these same messages?

[emr]

Thanks for the quick response. I figured it was a virus. So does that mean your mail server is blocking these before they hit exchange. Or are your users receiving these same messages?

I'm using GFI MailEssentials 11 and MailSecurity 9. MailSecurity is the AV for the mail server and it is catching all these.

MailEssentials is spam filtering.

I like both and they are very configurable and catch the vast majority of spam / virus received.

emr