Hobo_Jojo

ok..it appears that some of the systems at my work have this virus. we think. basically had a few emails sayin emails couldnt be sent cuz they had this virus, but the adresses they were allegedly sent to have never been used on the system and i thought it takes the ads from ones on ya system? also tried 2 difrent virus checkers and neither has found anything? do we have it or dont we?

Hobo_Jojo

anyone?

HHxx

The virus spoofs the sender email address. If the scanners you have tried failed to find it, then you most likely not have it.

H

Hobo_Jojo

14 views n no one wants to help me this is important as there are sensitive files and ppls personal data stored on the systems

Hobo_Jojo

hmm the adresses businesses like morgate places n stuff , if we dont have it why are we gettin these failure of delivery emails saying the msg we sent contained the virus

Nicks VR4

Firstly is you Anti-virus software upto date
What AV are you using

Where are the emails being blocked at ?

You could try using this to detect and remove
http://vil.nai.com/vil/stinger/

Dr Nick

Returning from a weekend away I have noticed the same thing.

I have a Hotmail account. Some e-mails were waiting saying failed to arrive at destination.

On closer inspection these were bounced because the alledgedly contained a virus.

On close inspection still it became clear that the bounced e-mail contained the virus. Also checking the date stamp, these e-mails were sent from my hotmail account whilse I was not there. Since this is an internet based system my only conclusion is that someone has hacked into my hotmail account and is using it to send these e-mails.

OR

These e-mails are not being bounced but just look like they have been and these are the messages containing the viuruses.

Can anyone comment?

My home e-mail address was unaffected by any of this.

Presumably it doesn't matter what protection software you have for an internet mail account. In the case of Hotmail presumably only what Microsoft put in place can protect this account.

Hobo_Jojo

ah got mine sorted now. wedont have the virus, turns out that someone uses the same email acount at the head quarters in australia and its there system thats infected.

chiark

That's it, end of story - that's all the help you need.

For Hotmail web accounts, you cannot get the virus unless you're using outlook as your hotmail client. If you're using the web interface, no worries, it's the virus spoofing itself to look like it came from you.

Cheers,
Nick.