From: loc.pham@comcast.net
Date: Thu Feb 03 2005 - 11:33:07 GMT-3
Hello Tim,
Don't worry, I get the same thing from ' symmantec mail sercurity ' like you. I trace the source and it come from a bogus place , not Simmantec at all...
Just send it to 127.0.0.1 ( ika spam ;) )
lP.
> Zafar,
>
> Thanks for getting back to me on this.
>
> There's one thing you may have overlooked.
>
> None of my posts to Group Study include any attachments.
>
> If there's an attachment on my email, it's not because I added one.
>
> That's why I'm concerned that I have a virus. If I'm not added any
> attachment, what is?
>
> Do you think it's possible the Symantec is wrong about my email having an
> attachment?
>
> And, I am running a anti-virus program full-time and it does a complete
> system scan every night.
>
> Whta do you think I should do now?
>
> Thanks again, Tim
>
>
> ----- Original Message -----
> From: "Zafar Khan" <mahaguru@gmail.com>
> To: "ccie2be" <ccie2be@nyc.rr.com>
> Sent: Wednesday, February 02, 2005 11:34 PM
> Subject: Re: OT: Symantec Mail Security detected that you sent a message
> containing a suspicious attachment. (SY
>
>
> > OK, I will try to be simple
> > First of all you dont need to worry that your PC is infected with a
> > virii based ONLY on the information you recieved via a system
> > generated message from (nscglobal.com, nsctechnology.com,
> > nsc-technology.com) 's Symantec Mail Security system (provided you are
> > running some sort of anti-virus program which report that you are
> > clean) .
> >
> > The lame admin. at nscglobal.com/nsc-technology.com is to be blamed
> > (The actual Symantec Anitvirus Engine seems to be runing on
> > NSC-Technology.com) , its how he has configured his "Mail Security"
> > that if you sent him any attachmed which he doesn't recognizes
> > declares to be a threat !(eg vcf, even htmls !! remember text goes
> > seperate and the formating goes seperate in a mail as an attachment)
> >
> > Proof ? Try sending an email to a user on that domain WITOUT any
> > attachment (ie compose you message in plain text, no vcf no thing) and
> > see what happens and do let me know too
> >
> > Cheers !
> >
> > Zafar
> >
> >
> >
> > On Wed, 2 Feb 2005 19:42:00 -0500, ccie2be <ccie2be@nyc.rr.com> wrote:
> > > I'm dying of curiosity.
> > >
> > > Tim
> > > ----- Original Message -----
> > > From: "Zafar Khan" <mahaguru@gmail.com>
> > > To: "ccie2be" <ccie2be@nyc.rr.com>
> > > Sent: Wednesday, February 02, 2005 7:59 AM
> > > Subject: Re: OT: Symantec Mail Security detected that you sent a message
> > > containing a suspicious attachment. (SY
> > >
> > > > Just got you mail .. I know what it is .. bit busy right now .. will
> > > > send you a detailed reply later ...
> > > >
> > > > Regads
> > > > zafar
> > > >
> > > >
> > > > On Wed, 2 Feb 2005 07:46:13 -0500, ccie2be <ccie2be@nyc.rr.com> wrote:
> > > > > Thanks, Here it is:
> > > > > *******************************************************
> > > > >
> > > > > Return-path: <antivirus_admin@nscglobal.com>
> > > > > Received: from ms-mta-02 (ms-mta-02-smtp [10.10.4.6])
> > > > > by ms-mss-02.rdc-nyc.rr.com
> > > > > (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
> > > > > with ESMTP id <0IB9007IJ317LS@ms-mss-02.rdc-nyc.rr.com> for
> > > > > ccie2be@nyc.rr.com; Tue, 01 Feb 2005 15:46:20 -0500 (EST)
> > > > > Received: from nycmx03.mgw.rr.com (nycmx03.mgw.rr.com
> [24.29.102.163])
> > > > > by ms-mta-02.rdc-nyc.rr.com
> > > > > (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003))
> > > > > with ESMTP id <0IB900MHR317GP@ms-mta-02.rdc-nyc.rr.com> for
> > > > > ccie2be@nyc.rr.com
> > > > > (ORCPT ccie2be@nyc.rr.com); Tue, 01 Feb 2005 15:46:19 -0500 (EST)
> > > > > Received: from LDNEXCHANGE.nsc-technology.com
> > > > > (host151.nscglobal.com [195.217.168.151] (may be forged))
> > > > > by nycmx03.mgw.rr.com (8.12.10/8.12.8) with ESMTP id j11KkF0U004944
> for
> > > > > <ccie2be@nyc.rr.com>; Tue, 01 Feb 2005 15:46:16 -0500 (EST)
> > > > > Received: from mail pickup service by LDNEXCHANGE.nsc-technology.com
> > > with
> > > > > Microsoft SMTPSVC; Tue, 01 Feb 2005 20:47:46 +0000
> > > > > Date: Tue, 01 Feb 2005 20:47:45 +0000
> > > > > From: antivirus_admin@nscglobal.com
> > > > > Subject: Symantec Mail Security detected that you sent a message
> > > containing
> > > > > a
> > > > > suspicious attachment. (SYM:23467040680784428875)
> > > > > To: ccie2be@nyc.rr.com
> > > > > Message-id: <095801c5089f$487ea9d0$d901a8c0@nsctechnology.com>
> > > > > MIME-version: 1.0
> > > > > X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> > > > > X-Mailer: Microsoft CDO for Exchange 2000
> > > > > Content-type: text/plain; charset=utf-8
> > > > > Content-transfer-encoding: 7bit
> > > > > Content-class: urn:content-classes:message
> > > > > Importance: normal
> > > > > Priority: normal
> > > > > Thread-topic: Symantec Mail Security detected that you sent a
> message
> > > > > containing a suspicious attachment. (SYM:23467040680784428875)
> > > > > Thread-index: AcUIn0h+Glafi8GHR8mJDteC2bcMiQ==
> > > > > X-Virus-Scanned: Symantec AntiVirus Scan Engine
> > > > > Original-recipient: rfc822;ccie2be@nyc.rr.com
> > > > > X-OriginalArrivalTime: 01 Feb 2005 20:47:46.0104 (UTC)
> > > > > FILETIME=[489DA380:01C5089F]
> > > > >
> > > > > Subject of the message: Re: Traffic Share Count
> > > > > Recipient of the message: "gladston@br.ibm.com"
> > > > > <gladston@br.ibm.com>;"ccielab@groupstudy.com"
> <ccielab@groupstudy.com>
> > > > >
> > > > > *************************************************************
> > > > >
> > > > > ----- Original Message -----
> > > > > From: "Zafar Khan" <mahaguru@gmail.com>
> > > > > To: "Mark Lasarko" <mlasarko@co.ba.md.us>
> > > > > Cc: <ccie2be@nyc.rr.com>
> > > > > Sent: Tuesday, February 01, 2005 10:47 PM
> > > > > Subject: Re: OT: Symantec Mail Security detected that you sent a
> message
> > > > > containing a suspicious attachment. (SY
> > > > >
> > > > > > Send me the Complete header of that email
> > > > > >
> > > > > > Regards
> > > > > > Zafar
> > > > > >
> > > > > >
> > > > > > On Tue, 01 Feb 2005 15:47:27 -0500, Mark Lasarko
> > > <mlasarko@co.ba.md.us>
> > > > > wrote:
> > > > > > > Me too either.
> > > > > > > It began a couple of days ago, this past weekend maybe?
> > > > > > >
> > > > > > > >>> "ccie2be" <ccie2be@nyc.rr.com> 2/1/2005 3:15:46 PM >>>
> > > > > > >
> > > > > > > Hi guys,
> > > > > > >
> > > > > > > I keep getting emails with the above subject even though I'm not
> > > > > > > attaching
> > > > > > > anything to my group study posts.
> > > > > > >
> > > > > > > I'm using McAfee anti-virus and the definations file is just one
> day
> > > > > > > old.
> > > > > > >
> > > > > > > I also use Lavasoft and Spybot Search and Destoy.
> > > > > > >
> > > > > > > None of these indicate I have a virus but yet I still get these
> > > emails
> > > > > > > from"Symantec".
> > > > > > >
> > > > > > > Anybody have any suggestions?
> > > > > > >
> > > > > > > TIA, Tim
> > > > > > >
> > > > > > >
> > > _______________________________________________________________________
> > > > > > > Subscription information may be found at:
> > > > > > > http://www.groupstudy.com/list/CCIELab.html
> > > > > > >
> > > > > > >
> > > _______________________________________________________________________
> > > > > > > Subscription information may be found at:
> > > > > > > http://www.groupstudy.com/list/CCIELab.html
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:16 GMT-3