Security Incidents mailing list archives

suspected virus


From: james <demarest () X25 NET>
Date: Tue, 25 Jul 2000 15:12:19 -0500

I am a internet support tech and have been getting frequent calls
concerning something that sounds like a virus.  I don't have a copy of the
virus, but the symptoms are as follows:

1)Email have been added to the blocked senders list in outlook
(express) without the user having added them.

2)I believe that once they have the virus, that the email
addresses from outgoing emails are added to the list. Not sure of that
though.

3)You can go into the message rules, and the blocked senders list and
remove the people that have been added.  They will stay empty until the
computer is reset.  After reboot the email addresses will be back in the
blocked senders list.

4)This virus appears to be propogating through Texas.  I do not know the
name of the file that is sent.

If you have any other questions or info that you need please feel free to
email me back at demarest () x25 net.  I will attempt to get more info about
this on future calls i recieve.  I would also appreciate any information
that you can give me on this, including fixes if any.

Thank you,
James Demarest
Level 2 Support Tech, Telenetwork, Inc.


Current thread: