Thanks Scott, I won't get into school until tomorrow. I have set my Outlook (here at home) to send these little beasts directly to delete. I think I have that vulnerability thing set up in the sender.eml - but will check. Maybe I have something messed up.
Nyla Wiebe [EMAIL PROTECTED] -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Sunday, December 22, 2002 8:27 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] CR Vulnerability Panic >My small school mail server is receiving a TON of email with this >message: > >Declude Virus v1.53 caught the [Outlook 'CR' Vulnerability] virus in >[No attachment] from [EMAIL PROTECTED] to: >[EMAIL PROTECTED] Given the "[EMAIL PROTECTED]" and the fact that this is a vulnerability, I would guess this is spam. >I've received well over 2,000 messages since 8am this morning. It is >all coming to postmaster which I monitor. What can I do, what should I >check, what's going on? The IP address is the same and the from is the >same. I am at home just watching these messages come through to my >Outlook account. Help! I'm still new with this! Vulnerabilities are in most cases not viruses, but actual E-mail that happens to contain a vulnerability. In this case, I would recommend opening one of the E-mail from the \IMail\spool\virus directory, to see what it says. It's also possible this is a mail loop -- in that case, I would recommend making sure that you have a line "SKIPIFVIRUSNAMEHAS Vulnerability" to the top of the \IMail\Declude\sender.eml file (without any blank lines after it; the SKIPIFVIRUSNAMEHAS, To:, From:, and Subject: lines need to be before the first blank line). That will prevent the possibility of a mail loop, and is highly recommended anyways (as most people sending out vulnerabilities are spammers, in which case the notification would go to an innocent victim). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
