Re: [cobalt-users] Virus or what?

[flash22@xxxxxxx]

On Sat, 6 Oct 2001, Pete wrote:

> Help I'm a newbie,
> 
> Our main technical man is out of town this weekend and something has
> surfaced that I've never seen before. Is the below a Virus, a Hack or
> what. One of our servers is getting this every half hour. (note: links

Yeah, it's a lame self emailing virus, someone probab;y has it and is
hitting yoyr mail server with it....it's not too smart and will try to
email to bogus addresses sometimes...(Won't hurt much, as long as it
doesn't go back out)

You need to figure out if one of your users is sending it out with your
server/domain as the return address,,and tell him to fix his virus ridden
machine ;)

> Diagnostic-Code: SMTP; 550 Invalid mail address

Juno has seen this before lol!

>           Hahaha <hahaha@xxxxxxxxxxx>

This is a pretty old virus, amazing how it refuses to completly die tho...
(you should reject email from this (complete) address btw)

More info, if you care ....

http://www.cert.org/incident_notes/IN-2001-02.html

Other links from here have more detail still...short answer is someone
needs a virus scanner on their winderz machine ;)

gsh