PDA

View Full Version : Do I have a worm virus???



Outnumbered
04-18-2005, 10:30 AM
I keep getting these failed attempted e-mail notices. These are people I have not sent e-mail to recently. It looks like someone is using my IP to send out worm attachments via e-mail. Am I right? I have run Norton and adware and nothing comes up. Any ideas?
Here is a sample of the e-mail I keep getting:
Hi. This is the qmail-send program at plesk.swiftcomm.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
<kim@mermaids.net>:
66.175.35.14 failed after I sent the message.
Remote host said: 554 5.7.1 Virus Worm.Mytob.AF found in mail - rejected
--- Below this line is a copy of the message.
Return-Path: <xxxxxxxxxxx@cox.net>
Received: (qmail 98816 invoked from network); 18 Apr 2005 16:54:34 -0000
Received: from unknown (HELO cox.net) (xxxxxxxx)
by plesk.swiftcomm.com with SMTP; 18 Apr 2005 16:54:34 -0000
From: xxxxxxxxx@cox.net
To: kim@mermaids.net
Subject: MAIL TRANSACTION FAILED
Date: Mon, 18 Apr 2005 09:58:23 -0700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0009_0B6F0B6F.255E255E"
X-Priority: 3
X-MSMail-Priority: Normal
This is a multi-part message in MIME format.
------=_NextPart_000_0009_0B6F0B6F.255E255E
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Here are your banks documents.
------=_NextPart_000_0009_0B6F0B6F.255E255E
Content-Type: plain/text;
name="Norton AntiVirus Deleted-1.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filenamefilename="Norton AntiVirus Deleted-1.txt"
Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW 50OiBkb2N1bWVudC5waWYu
DQpUaGUgVzMyLk15dG9iLkFRQG1tIHRocmVhdCB3YXMgZGV0ZW N0ZWQgaW4gdGhlIGF0dGFj
aG1lbnQu
------=_NextPart_000_0009_0B6F0B6F.255E255E--Hi. This is the qmail-send program at plesk.swiftcomm.com.

Scream
04-18-2005, 10:36 AM
It is possible. Which antivirus program do you use, and is it updated. New worms and viruses come out every day, so weekly (at a minimum) updates will keep you from having issues. Update your antivirus, run a full system scan. After that's done, go to an online virus scanning solution (free) and run it also. This will take time, but you want to make sure you've got your bases covered. If there are viruses detected, remove them before they spread. You should use an online resource this is not linked or related to your antivirus software, for example if you are using Norton Antivirus (NAV), try either Macafee or Panda's online free scan as a backup.
Good luck.
Scream

WYRD
04-18-2005, 10:38 AM
Does it burn when you pee? :confused: :D :D

topless
04-18-2005, 10:41 AM
When my dogs get worms, I give them these little white pills from the vet. :D

Miss BK
04-18-2005, 10:46 AM
Most likely, someone who has your e-mail address in thier address book has the worm virus. Worms often spoof a hijacked address as the sender. I get these "Delivery Failed" notices all the time.
The way to see if your computer is really sending out these mails is to check your SENT mail file. If you haven't sent mails to these names, then it probably is coming from someplace else.

HCS
04-18-2005, 10:47 AM
It's a trap. Wear a condom.

Outnumbered
04-18-2005, 10:50 AM
Most likely, someone who has your e-mail address in thier address book has the worm virus. Worms often spoof a hijacked address as the sender. I get these "Delivery Failed" notices all the time.
The way to see if your computer is really sending out these mails is to check your SENT mail file. If you haven't sent mails to these names, then it probably is coming from someplace else.
Cool. Then there is no way to use my IP address to send e-mail without it showing up in my outbox? There are none in the outbox so I guess I am clean.
Thanks

Scream
04-18-2005, 10:52 AM
Your sent box, your Outbox empties every time you send a message. Sent messages will be stored in your sent folder until deleted manually.
Scream

Outnumbered
04-18-2005, 12:07 PM
Your sent box, your Outbox empties every time you send a message. Sent messages will be stored in your sent folder until deleted manually.
Scream
Yes, that is correct :o

Ntwotrance
04-18-2005, 02:13 PM
you should run a stinger just to be sure, just my .02

Outnumbered
04-18-2005, 02:28 PM
you should run a stinger just to be sure, just my .02
How would I do that and what does it do?
Thanks

gnarley
04-18-2005, 02:38 PM
Someone you know has a virus/worm or someone you don't know that may have received a message with your name in the TO, CC or BCc fields or your address was picked up on a website from a scanning engine. Be careful where you place your public address. All it takes is one to have a virus come back. Now that it's out there
YOUR DOOMED