CDROM-Guide forums  

PDA

View Full Version : virus or hoax?


   
zymo
Jul 03, 2002, 01:58 PM
I keep getting E-mails from a mail delivery system saying that an E-mail that I sent could not be delivered because it may contain a virus. I have done a scan with avg and also an online scan which both say I'm clean. I havn't opened any infected E-mails even though I have been sent a couple lately. The addresses are ones I have never heard of and are not in my address book so I think this may be some kind of hoax. The subject of my so called infected mails is Questionaire and a few others. The strange thing is that I appear to be sending these e-mails when my computer is switched off (i'm on dial up) which is impossible so is somebody winding me up or what?


This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

****@waldonet.net.mt
This message has been rejected because it has
an apparently executable attachment you.pif
This is a virus prevention measure.
If you meant to send this file then please
package it up as a zip file and resend it.

------ This is a copy of the message, including all the headers. ------
------ The body of the message is 123750 characters long; only the first
------ 65536 or so are included here.

Return-path: <zymo@blueyonder.co.uk>
Received: from modem-297.awesome.dialup.pol.co.uk ([62.25.129.41] helo=Stlqsdnck)
by mail5.svr.pol.co.uk with smtp (Exim 3.35 #1)
id 17Pl0D-0005eS-00
for ****@waldonet.net.mt; Wed, 03 Jul 2002 15:21:06 +0100
From: zymo <zymo@blueyonder.co.uk>
To: ****@waldonet.net.mt
Subject: DS Video Monitor module supports DirectShow,
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Yac55xr54X27c5bIec896276f5
Message-Id: <E17Pl0D-0005eS-00.2002-07-03-15-21-06@mail5.svr.pol.co.uk>
Date: Wed, 03 Jul 2002 15:21:06 +0100

CHR15
Jul 03, 2002, 02:30 PM
So did you actually attach the file you.pif ?

Some mail servers are configured to reject files, normally .exe files or .vbs. Its a security measure to prevent Potential Virus's getting onto their LAN's.

It doesn't mean there IS a virus, just that there is a chance that type of file COULD have one.

zymo
Jul 03, 2002, 03:10 PM
No I didnt, and the address shown is not one that I have ever sent any mail to ever. But I have had a few of these showing diferent recipients.

leday
Jul 03, 2002, 10:59 PM
As I understand it, the W32.klez viruses have a nasty habit of emailing themselves to people and picking random names out of the infected PC's address book to slip into the "From:" line, so someone who has an infected computer and has your address in their address book could be the culprit, making it look like the virus was sent by you but actually it wasn't. Check the Symantec website for more information on this virus.