On 3/9/2001 4:06 PM this was written:
>> I received yesterday an e-mail with a .exe file attached, it had
>> hardly any headers. There was an IP address where Imail received
>> it from but there was no from or subject.
>
> If there was no From: or Subject:, but there was an attachment, then it was
> very likely a virus. A legitimate E-mail client won't send out E-mail without
> a From: address. If there is an attachment sent via MIME, then there *must*
> be some headers at least.
There was a received line in that one but the ones for my boss he said there
was no header whatsoever, he checked the full source as sent to him in
Eudora.
In mine with the attachment it was received from an ip directly by our
server. I probably could have tracked that one, it is probably unrelated to
what my boss has received. He is the 'default' mailbox so he may be getting
them because the server doesn't know where to send them.
> If you saved the message, and can show the headers here, we could give you
> some more information. Do you remember the name of the attachment?
I didn't save the message, the filename was weird like DOJEKGJE.EXE
(characters made up) but it was unintelligible.
>> Now my boss has received two e-mails over the last two days, no
>> headers at all, bother were just a series of numbers. No message
>> at all.
>
> Where were the numbers, in the E-mail itself? Were there letters as well? It
> could be MIME encoding. Were there really no headers -- not even a
> "Received:" header?
The text of the second one he sent me was this:
--
1 983477691.000
2 984162692.000
--
The first was this (with many more lines)
--
1 6592
2 7298
3 7299
4 7300
5 7301
6 7302
7 7303
8 7304
9 7305
10 7306
11 7307
12 7308
--
When I asked him him about full headers and looking at the source, etc, he
said he checked that and his reply was:
--
there are NO headers. Nothing.. Nada. Zilch... absence of presence.
void... null value
--
It's almost like it's counting something.
>> Do y'all think there is a corruption somewhere? I would like to
>> check the logs but there is no information to look at!
>
> At the very least, IMail will store the date/time it received the file in the
> .mbx file. You can open it, look for the problem E-mail, and just above the
> first header will be a line beginning with "From <" that will have the
> date/time that IMail received it. You can then check the log file for that
> time and find the E-mail.
I'll see what I can find, but with the absense of any header at all, it's
difficult.
--
Thomas Deliduka
IT Manager
-------------------------
New Eve Media
The Solution To Your Internet Angst
http://www.neweve.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
