>I just had a staff member FWD an email to me that was sent to them
>by the root account.
by root on what machine? You can't trust any headers.
>There was no message but a file called HIBBIKHI.EXE was attached.
suspect it, scan it
>I searched the HDD s of the mail server and found nothing but on
>searching the registry I found and entry for this file under
>HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Doc
>Find Spec MRU
>Yeah I know .. Internet explorer is only install on this machine to
>download updates. We are mainly a Mac network so getting the files
>from my machine to the mail server is a pain, easier to just
>download directly. Anyway I searched the log files and found that
>the root had sent out 2 of them.
Imail is spontaneously sending out email with .exe attachement and
null sender? hmmm
Len
http://MenAndMice.com/DNS-training : DNS training for USA and
Europe
http://BIND8NT.MEIway.com : Binary for ISC BIND 8.2.3 for NT4 & W2K
http://IMGate.MEIway.com : Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
