Virus problem??

duragezic

Lifer
Oct 11, 1999
11,234
4
81
Ok for the past couple of months at work here, we have been getting a lot of emails coming back from the place we get our ISP through saying that there was a virus attached to the file and it has been removed. The message says:

"This is a message from Northern Networking E-Mail Virus Protection
------------------------------------------------------------------
The original e-mail attachment "message.scr"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Tue Jul 27 10:25:44 2004 the virus scanner said:
Bitdefender: Found virus Win32.Netsky.P@mm in file message.scr
F-Prot: message.scr Infection: W32/Netsky.P@mm
MailScanner: Windows Screensavers are often used to hide viruses (message.scr)

Note to Help Desk: Look on the Northern_Networking MailScanner in /var/spool/MailScanner/quarantine/20040727 (message AE81823D9C).
--
Postmaster"

As you can see, the virus it mentions is Win32.Netsky.P@mm. I also seen .Z@mm once or twice. So I read up on it and ran a virus check for it in addition to the Norton Antivirus Corporate Edition that gets run once a week with the newest definitions and neither of them EVER has found a virus. I had the virus checkers check the server too and no virus was found. What can I do?? Is there really a virus?
 

dclive

Elite Member
Oct 23, 2003
5,626
2
81
Originally posted by: duragezic
Ok for the past couple of months at work here, we have been getting a lot of emails coming back from the place we get our ISP through saying that there was a virus attached to the file and it has been removed. The message says:

"This is a message from Northern Networking E-Mail Virus Protection
------------------------------------------------------------------
The original e-mail attachment "message.scr"
was believed to be infected by a virus and has been replaced by this warning
message.

If you wish to receive a copy of the *infected* attachment, please
e-mail helpdesk and include the whole of this message
in your request. Alternatively, you can call them, with
the contents of this message to hand when you call.

At Tue Jul 27 10:25:44 2004 the virus scanner said:
Bitdefender: Found virus Win32.Netsky.P@mm in file message.scr
F-Prot: message.scr Infection: W32/Netsky.P@mm
MailScanner: Windows Screensavers are often used to hide viruses (message.scr)

Note to Help Desk: Look on the Northern_Networking MailScanner in /var/spool/MailScanner/quarantine/20040727 (message AE81823D9C).
--
Postmaster"

As you can see, the virus it mentions is Win32.Netsky.P@mm. I also seen .Z@mm once or twice. So I read up on it and ran a virus check for it in addition to the Norton Antivirus Corporate Edition that gets run once a week with the newest definitions and neither of them EVER has found a virus. I had the virus checkers check the server too and no virus was found. What can I do?? Is there really a virus?




From my read, it seems that message is telling you that your ISP's virus scanner already removed the virus from the attachment. I'd guess someone ELSE sent you an attachment that was infected.