Posted: Wed Sep 01, 2004 1:46 pm
hah! you didn't get any email from me. 
Mobile Bay Reef Keepers
Mobile Bay Reef Keepers - A reef keeping community located in the Alabama and Gulf Coast region.
https://www.mbrk.com/
Terry has a virus!!
Page 2 of 3
Posted: Wed Sep 01, 2004 1:46 pm
Like Brandon said, it's gotta be a worm.
Posted: Wed Sep 01, 2004 2:07 pm
Brandon, what time was it sent?
Posted: Wed Sep 01, 2004 2:08 pm
looks like get to join the group. Just got one from the postmaster with foto attachment. Thanks for the headsup gang.
Posted: Wed Sep 01, 2004 2:15 pm
I just got one from Lonestar that comcast's virus catcher found:
From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:15:05 +0000
This message has been processed by Brightmail(r) Anti-Virus using
Symantec's AntiVirus Technology.
1/calc.exe was infected with the malicious virus Download.Ject.C and has been
deleted because the file cannot be cleaned.
For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .
--------------------------------------------------------------------------------
Attached Message
--------------------------------------------------------------------------------
From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:08:09 +0000
foto
(Attachments successfully scanned for viruses.)
Attachment 1: foto.zip (application/octet-stream)
From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:15:05 +0000
This message has been processed by Brightmail(r) Anti-Virus using
Symantec's AntiVirus Technology.
1/calc.exe was infected with the malicious virus Download.Ject.C and has been
deleted because the file cannot be cleaned.
For more information on anti-virus tips and technology, visit
http://www.brightmail.com/antivirus .
--------------------------------------------------------------------------------
Attached Message
--------------------------------------------------------------------------------
From: "Jreddins"
To: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Date: Wed, 1 Sep 2004 14:08:09 +0000
foto
(Attachments successfully scanned for viruses.)
Attachment 1: foto.zip (application/octet-stream)
Posted: Wed Sep 01, 2004 2:27 pm
It was sent from someone on networktel.net not comcast this time.Scott wrote:Brandon, what time was it sent?
Time shows 9:08am
Return-Path: <rscotth45@comcast.net>
Received: from DJ90G241.net (216-107-127-60.wan.networktel.net [216.107.127.60])
by access400.com (8.11.6/8.11.6) with SMTP id i81E83V20226
for <blah@access400.com>; Wed, 1 Sep 2004 09:08:03 -0500
Date: Wed, 01 Sep 2004 09:08:14 -0600
To: "Blah" <blah@access400.com>
From: "Rscotth" <rscotth45@comcast.net>
Subject: foto
Message-ID: <kfvgxybkqtlinooyfft@access400.com>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------yzyepptsljypfcnogzem"
......
Posted: Wed Sep 01, 2004 2:31 pm
Prob just an ISP, of some sort... but it is in Pensacola.
Search results for: 216.107.127.60
OrgName: Network Telephone Corporation
OrgID: NTEL
Address: 815 South Palafox St
Address: 3rd Floor
City: Pensacola
StateProv: FL
PostalCode: 32501
Country: US
Search results for: 216.107.127.60
OrgName: Network Telephone Corporation
OrgID: NTEL
Address: 815 South Palafox St
Address: 3rd Floor
City: Pensacola
StateProv: FL
PostalCode: 32501
Country: US
Posted: Wed Sep 01, 2004 4:00 pm
I got a few more today.
Posted: Wed Sep 01, 2004 4:21 pm
Checked the log on my mail server:
(confirmed it is from networktel.net @ IP Address 216.107.127.60)
Sep 1 09:08:04 access400 sendmail[20226]: i81E83V20226: from=<rscotth45@comcast.net>, size=6801, class=0, nrcpts=1, msgid=<kfvgxybkqtlinooyfft@access400.com>, proto=SMTP, daemon=MSA, relay=216-107-127-60.wan.networktel.net [216.107.127.60]
Sep 1 09:08:08 access400 sendmail[20233]: i81E83V20226: to=/var/spool/vmail/access400.com/mail/blah, ctladdr=<blah@access400.com> (8/0), delay=00:00:05, xdelay=00:00:01, mailer=*file*, pri=36541, dsn=2.0.0, stat=Sent
Alright, one of you Pensacola guys/gals has a virus.
Free Virus Scanners:
http://www.pctools.com/spyware-doctor/? ... l_google12
http://housecall.trendmicro.com/houseca ... t_corp.asp
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
(confirmed it is from networktel.net @ IP Address 216.107.127.60)
Sep 1 09:08:04 access400 sendmail[20226]: i81E83V20226: from=<rscotth45@comcast.net>, size=6801, class=0, nrcpts=1, msgid=<kfvgxybkqtlinooyfft@access400.com>, proto=SMTP, daemon=MSA, relay=216-107-127-60.wan.networktel.net [216.107.127.60]
Sep 1 09:08:08 access400 sendmail[20233]: i81E83V20226: to=/var/spool/vmail/access400.com/mail/blah, ctladdr=<blah@access400.com> (8/0), delay=00:00:05, xdelay=00:00:01, mailer=*file*, pri=36541, dsn=2.0.0, stat=Sent
Alright, one of you Pensacola guys/gals has a virus.
Free Virus Scanners:
http://www.pctools.com/spyware-doctor/? ... l_google12
http://housecall.trendmicro.com/houseca ... t_corp.asp
http://www3.ca.com/securityadvisor/virusinfo/scan.aspx
Posted: Wed Sep 01, 2004 5:00 pm
couldnt be me...I have a Mac (we dont get viruses) and im on bellsouth...
Who else here is from P'cola?
Who else here is from P'cola?
Posted: Wed Sep 01, 2004 5:50 pm
I don't know who started this thread, but shame on them for upsetting Terry!
Posted: Wed Sep 01, 2004 7:37 pm
http://www.grisoft.com/ <-- reputable free virus scanner with free unlimited updates.
Posted: Thu Sep 02, 2004 12:50 am
I got one from Krazyplace@mbrk.com yeaterday! I deleted it right away.
This e-mail has been scanned by the BellSouth MailGuard Anti-Virus service.
1/calc.exe was infected with the malicious virus Download.Ject.C and has been deleted because the file cannot be cleaned.
For more information on BellSouth MailGuard Anti-Virus service and helpful anti-virus tips, please visit: http://help.bellsouth.net/blscontent/co ... #antivirus
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.736 / Virus Database: 490 - Release Date: 8/9/2004
This e-mail has been scanned by the BellSouth MailGuard Anti-Virus service.
1/calc.exe was infected with the malicious virus Download.Ject.C and has been deleted because the file cannot be cleaned.
For more information on BellSouth MailGuard Anti-Virus service and helpful anti-virus tips, please visit: http://help.bellsouth.net/blscontent/co ... #antivirus
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.736 / Virus Database: 490 - Release Date: 8/9/2004
Posted: Thu Sep 02, 2004 5:04 am
Did we ever figure out who it was? It doesn't seem to be a problem for most of us, but somebody might be losing some personal information to this thing!
Posted: Thu Sep 02, 2004 7:02 am
To be serious for a change I am glad someone is on their toes to catch these things and pass the info along....do not care what system or software is being used it is possible for something to slip thru and really cause problems....thanks for all the heads up....... 
Cheers...cheers....
Cheers...cheers....