Delivery Notification - Your_Updated_Password!

Delivery Notification - Your_Updated_Password!
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Delivery Notification - Your_Updated_Password! pkornas 05-02-2007
Posted by on May 2, 2007, 10:02 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hey guys,

I have these annoying emails that I get from my smtp server. They spam
my mail box and I don't know if that's because I have a virus on the
server (which I don't think I have) or just someone is using my email
address and sends this viruses all over the place (mainly to the
webmasters or admins of msn, microsoft, gmx, hotmail). What I get back
from one of this servers (by my smtp server) is this:


The message or an attachment did not reach the intended recipient(s).

Subject: Your_Updated_Password!
From: hostmaster@hotmail.com
To: joyce@mayaromanoff.com
Date: Wed, 02 May 2007 13:26:53 -0600

Reason: virus detected (W32/Sober.AT@mm (exact))
Action: deny


Can someone pleace tell me what that can be.

P.S. I already checked couple desktops for W32/Sober.AT@mm virus and I
didn't find anything.

Thanks


Posted by David H. Lipman on May 2, 2007, 10:23 pm
If you were  Registered and logged in, you could reply and use other advanced thread options

| Hey guys,
|
| I have these annoying emails that I get from my smtp server. They spam
| my mail box and I don't know if that's because I have a virus on the
| server (which I don't think I have) or just someone is using my email
| address and sends this viruses all over the place (mainly to the
| webmasters or admins of msn, microsoft, gmx, hotmail). What I get back
| from one of this servers (by my smtp server) is this:
|
| The message or an attachment did not reach the intended recipient(s).
|
| Subject: Your_Updated_Password!
| From: hostmaster@hotmail.com
| To: joyce@mayaromanoff.com
| Date: Wed, 02 May 2007 13:26:53 -0600
|
| Reason: virus detected (W32/Sober.AT@mm (exact))
| Action: deny
|
| Can someone pleace tell me what that can be.
|
| P.S. I already checked couple desktops for W32/Sober.AT@mm virus and I
| didn't find anything.
|
| Thanks

It is what was reported. Email was received with the Sober Worm in attacghments
and the
attachments were removed.

Many email based worms use either harvested email addresses as the sender or
create their
own fake addresses.

This is to be considered "normal" and there isn't anything out of the ordinary
in this
situation.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm



Posted by Meni on May 3, 2007, 3:13 am
If you were  Registered and logged in, you could reply and use other advanced thread options
On May 3, 5:02 am, pkor...@gmail.com wrote:
> Hey guys,
>
> I have these annoying emails that I get from my smtp server. They spam
> my mail box and I don't know if that's because I have a virus on the
> server (which I don't think I have) or just someone is using my email
> address and sends this viruses all over the place (mainly to the
> webmasters or admins of msn, microsoft, gmx, hotmail). What I get back
> from one of this servers (by my smtp server) is this:
>
> The message or an attachment did not reach the intended recipient(s).
>
> Subject: Your_Updated_Password!
> From: hostmas...@hotmail.com
> To: j...@mayaromanoff.com
> Date: Wed, 02 May 2007 13:26:53 -0600
>
> Reason: virus detected (W32/Sober.AT@mm (exact))
> Action: deny
>
> Can someone pleace tell me what that can be.
>
> P.S. I already checked couple desktops for W32/Sober.AT@mm virus and I
> didn't find anything.
>
> Thanks

Thanks Heather, David,

Heather, I hope you feel better :-)
David is right. I'm talking about outbounds.

Here some more info about what happens and my environment:

1. I'm working on my PC normally, no firewall activity, everything is
idle.
2. I click "connect"; I'm getting new IP form my ISP DHCP. I'm now
connected to the internet.
3. After 1-3 seconds the firewall alerts on outbound directed to the
IP I had the last time I was connected to the internet, followed by a
second outbound directed to the IP I'm using now.
4. If I block these attempts it will not happen again until I
disconnect form the internet, than I get a third outbound to the IP I
last used.

It is like some process is monitoring my network connectivity events
and reacts to it.
I can't make rule to block the events because Application is N/A and
the IP is always different.
My OS is WinXP,
I use Windows Defender and Norton antivirus.
All scans are OK. All resident processes are verified by the windows
defender.

so ...
What do u say guys?

p.s. Please forgive my bad English.


Posted by Meni on May 3, 2007, 3:16 am
If you were  Registered and logged in, you could reply and use other advanced thread options
oops... worong thread. sorry.


Posted by =?Utf-8?B?TWlsbyAoIE1TUFNTKQ== on May 3, 2007, 7:30 am
If you were  Registered and logged in, you could reply and use other advanced thread options
if youre using outlook / outlook express automatically set it as a spam or
flag it to be blocked if youre using hotmail well mark it as a spam.

if youre using ISP based SMTP report it directly to them so that it can be
blocked right away - since its going through their e-mail filtering services.

Also can you forward a copy to me pls including if theres an attachments.
my e-mail is available when and if you click on my name in blue by my post.
--
Milo
MSPSS - ESCA


"pkornas@gmail.com" wrote:

> Hey guys,
>
> I have these annoying emails that I get from my smtp server. They spam
> my mail box and I don't know if that's because I have a virus on the
> server (which I don't think I have) or just someone is using my email
> address and sends this viruses all over the place (mainly to the
> webmasters or admins of msn, microsoft, gmx, hotmail). What I get back
> from one of this servers (by my smtp server) is this:
>
>
> The message or an attachment did not reach the intended recipient(s).
>
> Subject: Your_Updated_Password!
> From: hostmaster@hotmail.com
> To: joyce@mayaromanoff.com
> Date: Wed, 02 May 2007 13:26:53 -0600
>
> Reason: virus detected (W32/Sober.AT@mm (exact))
> Action: deny
>
>
> Can someone pleace tell me what that can be.
>
> P.S. I already checked couple desktops for W32/Sober.AT@mm virus and I
> didn't find anything.
>
> Thanks
>
>

Similar ThreadsPosted
AVERT Dat Release Notification: 4716 Dat Files Notification March 10, 2006, 6:24 pm
Avert Labs Dat Release Notification: 4789 Emergency Dat Files Release June 20, 2006, 8:34 pm
FYI: Avert Labs Dat Release Notification: 4828 Emergency Dat Files Release August 13, 2006, 9:21 am
FYI: Avert Labs Dat Release Notification: 4899 Emergency Dat Files Release November 17, 2006, 7:35 pm
FYI: Avert Labs Dat Release Notification: 4915 Emergency Dat Files Release December 10, 2006, 8:25 am
FYI: Avert Labs Dat Release Notification: 4997 Emergency Dat Files Release March 30, 2007, 9:31 pm
FYI: Avert Labs Dat Release Notification: 4997 Emergency Dat Files Release March 30, 2007, 9:54 pm

The site map in XML format XML site map

Contact Us | Privacy Policy