[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[at-l] Computer Virus Question?



--
[ Picked text/plain from multipart/alternative ]
I received this message a short time ago, but never emailed Dave personally=
.
Can anyone tell me how this works and if I really have a virus on my
computer?  I did a total scan a couple days ago and everthing seemed to com=
e
out fine.

Thanks, Sly


Subj:   Virus found in sent message " "=A0
Date:   12/7/2002 8:05:42 PM Eastern Standard Time
From:   <A HREF=3D"mailto:support@psknet.com";>support@psknet.com</A>
To: <A HREF=3D"mailto:Slyatpct@aol.com";>Slyatpct@aol.com</A>
Sent from the Internet (Details)



Attention: Slyatpct <Slyatpct@aol.com>.


A Virus was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message
reaching it's destination.

The Virus was reported to be:

the W32/Klez.h@MM virus !!!


Please update your virus scanner or contact your I.T support
personnel as soon as possible as you have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: Slyatpct@aol.com
RCPT TO:=A0=A0 daveh@psknet.com

... and with the following headers:

Received: from exprod5mx45.postini.com (HELO psmtp.com) (64.75.1.212)by r
elay.psknet.com with SMTP; 8 Dec 2002 01:05:25 -0000 from source
([152.163.225.160]) by exprod5mx45.postini.com ([64.75.1.245]) with SMTP;Sa=
t,
07 Dec 2002 17:05:23 PST from=A0 logs-te.proxy.aol.com (logs-te.proxy.aol.c=
om
[152.163.195.135]) by rly-ip02.mx.aol.com (v83.35) with ESMTP id
RELAYIN1-1207200457; Sat, 07 Dec 2002 20:04:57 -0500 from Osxyupb
(AC9C4FAA.ipt.aol.com [172.156.79.170])by logs-te.proxy.aol.com
(8.10.0/8.10.0) with SMTP id gB812bF521627for <daveh@psknet.com>; Sat, 7 De=
c
2002 20:02:38 -0500 (EST)
From:=A0 =A0 Slyatpct <Slyatpct@aol.com>
To:=A0 =A0 =A0 daveh@psknet.com
Subject:=A0
Message-ID: <200212080102.gB812bF521627@logs-te.proxy.aol.com>
Date:=A0 =A0 Sat, 7 Dec 2002 20:02:38 -0500 (EST)



The original message is kept in:

=A0 voyager.psknet.com:/var/spool/qmailscan/quarantine

where the System Anti-Virus Administrator can further diagnose it.

The Email scanner reported the following when it scanned that message:

---

---uvscan results ---
/var/spool/qmailscan/voyager.psknet.com103930952537629151/any.pif
=A0 =A0 =A0 =A0 Found the W32/Klez.h@MM virus !!!
/var/spool/qmailscan/working/new/voyager.psknet.com103930952537629151
=A0 =A0 =A0 =A0 Found the W32/Klez.eml virus !!!