| Author | Message | ||
| RJ Long (Rjlong)
Rating: N/A |
I got home today and logged in, only to find about 25 messages with the subject line saying "Returned mail: see transcript for details." The transcripts consist of anywhere from 1 > 15 various email addresses, none of which I recognize, plus this info at the bottom of the message: ********** Received: from orngca-mx-01.mgw.rr.com (orngca-mx-01.mgw.rr.com [66.75.160.128]) by vamx03.mgw.rr.com (8.12.10/8.12.8) with ESMTP id jB8JAMuJ000464; Thu, 8 Dec 2005 14:19:24 -0500 (EST) Received: from host-64-179-36-151.har.choiceone.net (HELO juxcq.net) ([64.179.36.151]) by orngca-mx-01.mgw.rr.com with SMTP; 08 Dec 2005 14:18:23 -0500 From: Rustysax@comcast.net To: ex-smtp@tampabay.rr.com Date: Thu, 08 Dec 2005 18:39:47 UTC Subject: hi, ive a new mail address Importance: Normal X-Mailer: SpeedMail_V8.67 X-Priority: 3 (Normal) Message-ID: <03f8b0e1e25.060b@comcast.net> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="====2ea849.bdafbdada910bb" Content-Transfer-Encoding: 7bit X-Virus-Scanned: Symantec AntiVirus Scan Engine X-Virus-Scan-Result: Repaired 4815 W32.Sober.X@mm!zip ********** Now, I think my machine's been infected by that W32.Sober.X@mm!zip worm.  So, fellow busnuts, how do I get rid of it? TIA, RJ PD4106-2784 Fresno CA | ||
| David Hartley (Drdave)
Rating: N/A |
http://us.mcafee.com/virusInfo/default.asp?id=description&virus_k=137072 Download the Stinger tool to remove. | ||
| John MC9 Rating: N/A |
Re: "25 messages with the subject line saying "Returned mail: see transcript for details." " Most of the spam has been coming through using that "returned mail" nonsense in the subject line. Some carry an attachment also. Set your email program to let you see only the headers, don't open any email you do not recognize, especially those carrying attachments. You don't want to preview or read the message as they are delivered to you, it's no longer a safe thing to do. It's also best to turn off HTML, or "rich text", for the delivery of mail. HTML can carry some bad code, automatically sending your connection off to some site that can do real harm. The "returned mail" subject line is the way they get the mail through the filters and to you. I simply delete those, along with the rest of the junk. Run that worm detector Dave mentioned (to be safe and certain), then relax knowing it's just another spamming method... | ||
| airless in Jacksonville Rating: N/A |
We can dispatched a tech to fix this for you and do a total cleanup of the system. |