Forum Home
Press F1
 
Thread ID: 19296 2002-05-12 09:58:00 Curious email virus warning Guest (0) Press F1
Post ID Timestamp Content User
48483 2002-05-12 09:58:00 Hi team

just opened my email & found two duplicate FW messages with the word virus in the message line along with a few other words. before deleting them I checked their source which was an unknown company (Shandon & Associates) and the destination was 'unknown recipient.

After deleting I decided to empty my deleted items folder and to my surprise, as I deleted a mesage came up saying that the sender (Shandon) had requested a receipt be sent if the file was deleted. I declined the option to send a receipt but the behaviour intrigued me.

Has anybody seen this before? I strongly suspect that both messages were viruses but what's with the 'Send receipt if deleted' idea?

Cheers

Billy 8-{)
Guest (0)
48484 2002-05-12 12:25:00 Hi Billy,

Perhaps this MS KB article explains it?

support.microsoft.com

It may have been KLEZ as it seems to send itself 'from' other addresses in the infected file
Guest (0)
48485 2002-05-12 12:31:00 Or it may have been an automated AV warning from recipients of KLEZ infected emails 'from' you!

Comlicated ain't it!
Guest (0)
48486 2002-05-12 23:28:00 This is a sneaky worm, but Norton's picked it up coming in through Xtra's free email service, to my Outlook In Box.

Sender was 'Congratulations', with attach.called 'unk00007.unk'.

Sent it off to SARC, should Xtra be notified and what's wrong with the Wordwrap in this 'respond box', must be the W32 worm perhaps!!!!!!!!!!!!!!.

Les (3)
Guest (0)
48487 2002-05-13 02:23:00 I don't think so ger (or may I call you Rod?)

Although I have not had reason to suspect infection by Klez, out of curiosity I downloaded the removal tool a week or so ago and have run it twice since then without infection being detected.

I'll try again just for luck though!

Cheers

Billy 8-{)
Guest (0)
1