Terry has a virus!!

Melissakins · Post by **Melissakins** » Wed Sep 01, 2004 1:46 pm

hah! you didn't get any email from me.

Melissakins · Post by **Melissakins** » Wed Sep 01, 2004 1:46 pm

Like Brandon said, it's gotta be a worm.

Scott · Post by **Scott** » Wed Sep 01, 2004 2:07 pm

Brandon, what time was it sent?

Jahdiel · Post by **Jahdiel** » Wed Sep 01, 2004 2:08 pm

looks like get to join the group. Just got one from the postmaster with foto attachment. Thanks for the headsup gang.

Scott · Post by **Scott** » Wed Sep 01, 2004 2:15 pm

I just got one from Lonestar that comcast's virus catcher found:

From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:15:05 +0000

This message has been processed by Brightmail(r) Anti-Virus using
Symantec's AntiVirus Technology.

1/calc.exe was infected with the malicious virus Download.Ject.C and has been
deleted because the file cannot be cleaned.

For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .

--------------------------------------------------------------------------------
Attached Message
--------------------------------------------------------------------------------

From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:08:09 +0000

foto

(Attachments successfully scanned for viruses.)

Attachment 1: foto.zip (application/octet-stream)

Brandon · Post by **Brandon** » Wed Sep 01, 2004 2:27 pm

Scott wrote:Brandon, what time was it sent?

It was sent from someone on networktel.net not comcast this time.
Time shows 9:08am

Return-Path: <rscotth45@comcast.net>
Received: from DJ90G241.net (216-107-127-60.wan.networktel.net [216.107.127.60])
by access400.com (8.11.6/8.11.6) with SMTP id i81E83V20226
for <blah@access400.com>; Wed, 1 Sep 2004 09:08:03 -0500
Date: Wed, 01 Sep 2004 09:08:14 -0600
To: "Blah" <blah@access400.com>
From: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Message-ID: <kfvgxybkqtlinooyfft@access400.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------yzyepptsljypfcnogzem"

......

Brandon · Post by **Brandon** » Wed Sep 01, 2004 2:31 pm

Prob just an ISP, of some sort... but it is in Pensacola.

Search results for: 216.107.127.60

OrgName: Network Telephone Corporation
OrgID: NTEL
Address: 815 South Palafox St
Address: 3rd Floor
City: Pensacola
StateProv: FL
PostalCode: 32501
Country: US

Snakeman · Post by **Snakeman** » Wed Sep 01, 2004 4:00 pm

I got a few more today.

Brandon · Post by **Brandon** » Wed Sep 01, 2004 4:21 pm

Checked the log on my mail server:
(confirmed it is from networktel.net @ IP Address 216.107.127.60)

Sep 1 09:08:04 access400 sendmail[20226]: i81E83V20226: from=<rscotth45@comcast.net>, size=6801, class=0, nrcpts=1, msgid=<kfvgxybkqtlinooyfft@access400.com>, proto=SMTP, daemon=MSA, relay=216-107-127-60.wan.networktel.net [216.107.127.60]
Sep 1 09:08:08 access400 sendmail[20233]: i81E83V20226: to=/var/spool/vmail/access400.com/mail/blah, ctladdr=<blah@access400.com> (8/0), delay=00:00:05, xdelay=00:00:01, mailer=*file*, pri=36541, dsn=2.0.0, stat=Sent

Alright, one of you Pensacola guys/gals has a virus.

Free Virus Scanners:
http://www.pctools.com/spyware-doctor/? ... l_google12
http://housecall.trendmicro.com/houseca ... t_corp.asp
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx

danielmiller82 · Post by **danielmiller82** » Wed Sep 01, 2004 5:00 pm

couldnt be me...I have a Mac (we dont get viruses) and im on bellsouth...
Who else here is from P'cola?

KrazyPlace · Post by **KrazyPlace** » Wed Sep 01, 2004 5:50 pm

I don't know who started this thread, but shame on them for upsetting Terry!

ShagMan · Post by **ShagMan** » Wed Sep 01, 2004 7:37 pm

http://www.grisoft.com/ <-- reputable free virus scanner with free unlimited updates.

Xster · Post by **Xster** » Thu Sep 02, 2004 12:50 am

I got one from Krazyplace@mbrk.com yeaterday! I deleted it right away.

This e-mail has been scanned by the BellSouth MailGuard Anti-Virus service.

1/calc.exe was infected with the malicious virus Download.Ject.C and has been deleted because the file cannot be cleaned.

For more information on BellSouth MailGuard Anti-Virus service and helpful anti-virus tips, please visit: http://help.bellsouth.net/blscontent/co ... #antivirus

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.736 / Virus Database: 490 - Release Date: 8/9/2004

KrazyPlace · Post by **KrazyPlace** » Thu Sep 02, 2004 5:04 am

Did we ever figure out who it was? It doesn't seem to be a problem for most of us, but somebody might be losing some personal information to this thing!

tbmoore · Post by **tbmoore** » Thu Sep 02, 2004 7:02 am

To be serious for a change I am glad someone is on their toes to catch these things and pass the info along....do not care what system or software is being used it is possible for something to slip thru and really cause problems....thanks for all the heads up.......

Cheers...cheers....