Have you read the description of how the virus works? > -----Original Message----- > From: Kim Schotanus [mailto:[EMAIL PROTECTED] > Sent: 22 September 2003 13:41 > To: Exchange Discussions > Subject: RE: [EMAIL PROTECTED] > > > Ok, but I checked all my servers, they're clean, scanmail is > up to date and functionning, why am I getting those emails > from [EMAIL PROTECTED] then? > Kim > > > -----Original Message----- > From: Couch, Nate [mailto:[EMAIL PROTECTED] > Sent: maandag 22 september 2003 14:30 > To: Exchange Discussions > Subject: RE: [EMAIL PROTECTED] > > > Wasn't this a sign of either the Mimail or Blaster virus a > few weeks ago that it would send email using the "[EMAIL PROTECTED]"? > > Nate Couch > EDS Messaging > > > ---------- > > From: Kim Schotanus > > Reply To: Exchange Discussions > > Sent: Monday, September 22, 2003 7:19 AM > > To: Exchange Discussions > > Subject: RE: [EMAIL PROTECTED] > > > > Microsoft Mail Internet Headers Version 2.0 > > From: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Date: Mon, 22 Sep 2003 13:49:04 +0200 > > MIME-Version: 1.0 > > Content-Type: multipart/report; report-type=delivery-status; > > boundary="9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b" > > X-DSNContext: 335a7efd - 4457 - 00000001 - 80040546 > > Message-ID: <[EMAIL PROTECTED]> > > Subject: Delivery Status Notification (Failure) > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: text/plain; charset=unicode-1-1-utf-7 > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: message/delivery-status > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b > > Content-Type: message/rfc822 > > > > Received: from mail pickup service by morpheus.intas.be > with Microsoft > > > SMTPSVC; > > Mon, 22 Sep 2003 13:49:03 +0200 > > thread-index: AcOA/4U6leJxzAlUTPW20EQujsqr6w== > > Thread-Topic: ScanMail Message: To Sender virus found and action > > taken. > > From: <Administrator> > > Sender: <Administrator> > > To: <[EMAIL PROTECTED]> > > Subject: ScanMail Message: To Sender virus found and action taken. > > Date: Mon, 22 Sep 2003 13:49:03 +0200 > > Message-ID: <[EMAIL PROTECTED]> > > MIME-Version: 1.0 > > Content-Type: text/plain; > > charset="utf-8" > > Content-Transfer-Encoding: 7bit > > X-Mailer: Microsoft CDO for Exchange 2000 > > Content-Class: urn:content-classes:message > > Importance: normal > > Priority: normal > > X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300 > > X-OriginalArrivalTime: 22 Sep 2003 11:49:03.0874 (UTC) > > FILETIME=[85593E20:01C380FF] > > > > > > --9B095B5ADSN=_01C380E0B0AB76840000030Bmorpheus.intas.b-- > > > > Kind regards, > > Kim Schotanus > > =========================== > > Kim Schotanus > > Information Systems Manager > > > > INTAS > > Avenue des Arts 58 > > B-1000 Brussels > > Belgium > > > > T. +32 2 549 01 11 > > F. +32 2 549 01 56 > > > > =========================== > > > > > > -----Original Message----- > > From: Andy David [mailto:[EMAIL PROTECTED] > > Sent: maandag 22 september 2003 14:09 > > To: Exchange Discussions > > Subject: Re: [EMAIL PROTECTED] > > > > > > Mongo check headers. > > > > > > ----- Original Message ----- > > From: "Kim Schotanus" <[EMAIL PROTECTED]> > > To: "Exchange Discussions" <[EMAIL PROTECTED]> > > Sent: Monday, September 22, 2003 5:15 AM > > Subject: [EMAIL PROTECTED] > > > > > > Hi there, > > > > I'm getting more and more virusses coming from > [EMAIL PROTECTED], we have > > > no address called [EMAIL PROTECTED] (not even as an alias). I cannot > > trace where the mails are coming from... Any ideas? > > > > kim > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?> enter=exchange&text_mode > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?> enter=exchange&text_mode > > =& > > lang=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: > > > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?> enter=exchange&text_mode > > =&la > > ng=english > > To unsubscribe: mailto:[EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: > http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&t ext_mode=& lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
_________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=& lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]