It is a virus called Sober.C. http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
That subject line is one of the known ones it uses. John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:IMail_Forum- > [EMAIL PROTECTED] On Behalf Of Rick Klinge > Sent: Friday, January 23, 2004 7:52 AM > To: [EMAIL PROTECTED] > Subject: [IMail Forum] BUGS? > > Great to know that Declude and F-Prot for dos still works.. But what is > this: > > The Anti Virus software on JaRay.net has reported that you were sent > an E-mail from [Forged], containing the W32/[EMAIL PROTECTED] virus in the > refcode29384.txt.com attachment. The subject of the E-mail was "Your IP > was > logged". > > The E-mail containing the virus has been destroyed to prevent further > damage > and [Forged] has been notified. > > Headers Follow: > Received: from OEMCOMPUTER.it [151.29.248.39] by JaRay.net with ESMTP > (SMTPD32-8.05) id A45F247012C; Fri, 23 Jan 2004 08:49:03 -0600 > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Your IP was logged > Importance: Normal > X-Mailer: X-Fax Mail V6.69 > X-Priority: 3 (Normal) > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="e94c19ee.3b3c545" > This is a multi-part message in MIME format. > X-IMAIL-SPAM-VALHELO: (38207788) > > Tia, > > ~Rick > > ___________________________________________________________________ > Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
