RE: email - need help

  • From: "Sonny Willis" <SWillis@xxxxxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 11 May 2004 09:22:17 -0500

Or check your AV logs.  Sounds like Netsky, spoofed "From" and
"message.scr".

  _____  

From: MAI ANH TUAN [mailto:TUANMA@xxxxxxxxxx] 
Sent: Tuesday, May 11, 2004 12:36 AM
To: [ExchangeList]
Subject: [exchangelist] RE: email - need help


http://www.MSExchange.org/

http://www.MSExchange.org/


Check Internet Header and find out the IP where the mail had been sent,

 

Then check it on DNSStuff website to find who own that IP.

 

______________________________________________________________
Mai Anh Tuan <http://www.freewebs.com/tuanevnit> 
Networking and system service - Information technology center -
Electricity of Vietnam. <http://www.freewebs.com/tuanevnit> 
'  04-9741910 (672)

*  0912177199
*  tuanma@xxxxxxxxxx <mailto:tuanma@xxxxxxxxxx> 

  _____  

From: Hery [mailto:hery@xxxxxxxxxxxxxx] 
Sent: Tuesday, May 11, 2004 12:11 PM
To: [ExchangeList]
Subject: [exchangelist] RE: email - need help

 

internet header ? and check at dnsstuff ? 

        ----- Original Message ----- 

        From: Mike Dufoe <mailto:dufoem@xxxxxxxxxxx>  

        To: [ExchangeList] <mailto:exchangelist@xxxxxxxxxxxxx>  

        Sent: Tuesday, May 11, 2004 9:52 AM

        Subject: [exchangelist] RE: email - need help

         

        http://www.MSExchange.org/
        
        

        Hery,

        Do you have the internet headers from this email?  If so, go to
http://www.dnsstuff.com/ <http://www.dnsstuff.com/>  and check it out.

        Mike

        -----Original Message-----
        From: Hery [mailto:hery@xxxxxxxxxxxxxx]
        Sent: Monday, May 10, 2004 9:40 PM
        To: [ExchangeList]
        Cc: Mark Shevill; Mark Fugatt
        Subject: [exchangelist] email - need help

        http://www.MSExchange.org/

        dear guys,

        today i rcv mail like below, i think it was a virus
(message.scr) and it's contain an attachment.

        but i really never sent that email to sosonic3@xxxxxxxxxx

        did i infected by virus ? or my mail server ? i'm using ex2k +
sp4 and sav 3.04 for filtering.

        thanx 

        hery

         

        ----- Original Message ----- 

        From: Hery 

        To: sosonic3@xxxxxxxxxx 

        Sent: Tuesday, May 11, 2004 7:14 AM

        Subject: Mail Delivery (failure sosonic3@xxxxxxxxxx)

         

        If the message will not displayed automatically,

        follow the link to read the delivered message.

        Received message is available at:

        www.rogers.com/inbox/sosonic3/read.php?sessionid-8822 

        attachment msg :

        Symantec AVF replaced message.scr with this text message.  The
original file had a prohibited name and was deleted.

         

        ------------------------------------------------------

        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist

        Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp

        Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ

        ------------------------------------------------------

        Other Internet Software Marketing Sites:

        Leading Network Software Directory: http://www.serverfiles.com

        No.1 ISA Server Resource Site: http://www.isaserver.org

        Windows Security Resource Site: http://www.windowsecurity.com/

        Network Security Library: http://www.secinf.net/

        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com

        ------------------------------------------------------

        ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
        Exchange Newsletters:
http://www.msexchange.org/pages/newsletter.asp
        Exchange FAQ:
http://www.msexchange.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 ISA Server Resource Site: http://www.isaserver.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------ 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------ 

Other related posts: