|
Posted by Vanguard on September 6, 2007, 10:39 pm
If you were Registered and logged in, you could reply and use other advanced thread options >
> "Vanguard" wrote ...
>>
>> "Oregano" wrote ...
>>> I am regularly being spammed by a "tool" that tells me a file I
>>> sent had a virus attached to it and the "warning" comes from
>>> ses.symantec.com. I genuinely suspect this is bogus and were I to
>>> click on the link (I'm replicating one of the "emails" below) then
>>> I'd probably be hijacked. I've gone onto Symantec's site and tried
>>> to notify them of the thing, sending the IP from which it comes.
>>> I'm using Outlook 2003 and I've set a junk mail filter so they're
>>> automatically deleted. BUT THEY ARE ANNOYING. What's even more
>>> annoying is Symantec's lack of a link anywhere on their websites
>>> so you can "talk" to them. That's why I dropped Norton/Symantec
>>> years ago. I'm protected with F-Secure, rebranded by my ISP as if
>>> it's their own. Works for me.
>>>
>>> Is there anything else I can do? Am I doing the right thing? It
>>> just goes on and on and on. Been almost a year now. You'd think
>>> the buggers who get tired when they got no response from my IP.
>>> But then maybe a computer never gets tired...or gives up.
>>>
>>> Replicated:
>>> This message has been processed by Symantec's AntiVirus
>>> Technology.
>>> message.scr was infected with the malicious virus W32.Sality.U and
>>> has been deleted because the file cannot be cleaned.
>>>
>>> For more information on antivirus tips and technology, visit
>>> http://ses.symantec.com/
>>
>>
>> Your, ahem, "copy" of the e-mail is worthless to anyone except you.
>> You show no headers. You don't indicate if what you pasted was
>> from the rendering of an HTML-formatted e-mail or if the e-mail was
>> in plain text. Obviously the URL that *you* show here is in the
>> Symantec domain but then we don't know if that is where the URL
>> points in an HTML-formatted e-mail.
>>
>> Since only you have a copy of the purported e-mail, check the IP
>> address in the Received header for the sender to see if it belongs
>> to Symantec. If it is coming from Symantec then there is a very
>> good chance that you have submitted a file for them to analyze.
>> For all we know, you configured the Symantec software to forward a
>> copy of whatever you quarantine so they can analyze it.
>
> Wow. Tacky response or what? Excuse me! Ok. Mr. Techy. I don't know
> how to access the source code in Outlook 2003. It's easy in Outlook
> Express but it's beyond me in Outlook 2003.
From your original post, it didn't appear that you are a newbie in
using Outlook. It looked like you knew Outlook well enough to know
how to see the headers and HTML source and why I lambasted you for
omitting them. Claiming what an e-mail said without showing headers
(munge out any personal info, like your e-mail address) along with the
raw source for the body is like walking into a car shop and saying
"It's broke" without providing any details or proof. I over-estimated
your expertise with Outlook.
To view the headers, use View -> Options (I use OL2002 so menu
navigation may differ in OL2003). If the e-mail is HTML formatted,
right-click in the body to use View Source. If that is too laborious
or you simply want some other navigation to get at the same info, get
the PocketKnife Peek add-on to Outlook
(http://www.xintercept.com/pkpeek.htm) which gives you a toolbar
button to open a separate tabbed window to look at headers and the raw
source of the body.
As for there being no contact links on Symantec's web site, well,
can't see how you missed it. On several occasions in the past when I
still used their Norton products, I contacted them using their
"e-mail" web form whereupon they would respond within 3 business days
to start a discussion. I just went to their site and in a minute
found
http://www.symantec.com/home_homeoffice/support/productdetail/contact_ts.jsp?pvid=nav_2008
(this was for NAV 2008; you will need to navigate through their
support pages to select whatever product you want to discuss with
them).
|