From: ccie2be (ccie2be@nyc.rr.com)
Date: Thu Feb 03 2005 - 11:43:22 GMT-3
Thanks Zafar.
I really appreciate knowing that my PC isn't infected with a virus and that
the message I'm getting from Symantec is WRONG.
I'm sending this to GS because some other people wrote me saying they were
experiencing the same issue.
It seems odd that the mis-configured anti-virus engine would "think" that my
emails have an attachment when, in fact, they don't, but I suppose stranger
things than that have happened.
In any case, thanks again for looking into this and laying my concerns to
rest.
Tim
----- Original Message -----
From: "Zafar Khan" <zafar@cpsp.edu.pk>
To: "'ccie2be'" <ccie2be@nyc.rr.com>
Sent: Thursday, February 03, 2005 9:29 AM
Subject: RE: OT: Symantec Mail Security detected that you sent a message
containing a suspicious attachment. (SY
OK, Great ..
Good news is that your PC is not infected with any virus (off course, based
on my mail server and antivirus engine report). You have configured your
mail client (i.e. : Microsoft Outlook Express 6.00.2800.1437) to compose and
email in plain text (as I can see from header Content-Type: text/plain;
charset="iso-8859-1") so your mail server stands clean (he is not
decomposing your mail message into data i.e. your email message and
formatting i.e. how it should appear onto other mail client), so definitely
no attachments here !
So, my initial statement and conclusion stands correct
1. Your PC is ok
2. Ask the other "admin" to fix it (if you really do care about it)
I don't need to give explanation that any email sent to Group Study goes to
a list of email addresses which have an entry of a sure from nscglobal.com
domain, who has a badly configured anti virus engine, which automatically
replies with a warning to the sender if it does not recognizes any
attachment or even the text !!
HTH
Zafar
-----Original Message-----
From: ccie2be [mailto:ccie2be@nyc.rr.com]
Sent: Thursday, February 03, 2005 5:23 PM
To: zafar@cpsp.edu.pk
Subject: Fw: OT: Symantec Mail Security detected that you sent a message
containing a suspicious attachment. (SY
Thanks Zafar,
I apologize for the mis-understanding.
When you said to send an email without an attachment, I thought you were
thinking that I was including attachments.
Anyway, this email doesn't have any attachments added by me.
So, if there is an attachment, something else must be putting it there.
Thanks again, Tim
----- Original Message -----
From: "Zafar Khan" <mahaguru@gmail.com>
To: "ccie2be" <ccie2be@nyc.rr.com>
Sent: Thursday, February 03, 2005 7:13 AM
Subject: Re: OT: Symantec Mail Security detected that you sent a message
containing a suspicious attachment. (SY
> I guess you might have overlooked my reply :-)
> As I said earlier, You DONT need to do anything, its the admin on that
> doamin who needs to do "something " to fix it
>
> > Do you think it's possible the Symantec is wrong about my email
> > having
an
> attachment?
>
> Symantec is as good as its been configured, so I cannot comment if
> Symantec is worng.
>
> Or if you want to be extra careful, send an email to me on "zafar at
> cpsp.edu.pk" , I am running an Anti-Virus, Anti-SPAM and Content
> Filtering on my mail server, then I wil be able to answer you in
> definate terms if you have a virus on your PC.
>
> HTH
> Zafar
>
> As I said you dont to send
>
>
> On Thu, 3 Feb 2005 05:32:08 -0500, ccie2be <ccie2be@nyc.rr.com> wrote:
> > Zafar,
> >
> > Thanks for getting back to me on this.
> >
> > There's one thing you may have overlooked.
> >
> > None of my posts to Group Study include any attachments.
> >
> > If there's an attachment on my email, it's not because I added one.
> >
> > That's why I'm concerned that I have a virus. If I'm not added any
> > attachment, what is?
> >
> > Do you think it's possible the Symantec is wrong about my email
> > having
an
> > attachment?
> >
> > And, I am running a anti-virus program full-time and it does a
> > complete system scan every night.
> >
> > Whta do you think I should do now?
> >
> > Thanks again, Tim
> >
> >
> > ----- Original Message -----
> > From: "Zafar Khan" <mahaguru@gmail.com>
> > To: "ccie2be" <ccie2be@nyc.rr.com>
> > Sent: Wednesday, February 02, 2005 11:34 PM
> > Subject: Re: OT: Symantec Mail Security detected that you sent a
> > message containing a suspicious attachment. (SY
> >
> > > OK, I will try to be simple
> > > First of all you dont need to worry that your PC is infected with
> > > a virii based ONLY on the information you recieved via a system
> > > generated message from (nscglobal.com, nsctechnology.com,
> > > nsc-technology.com) 's Symantec Mail Security system (provided you
> > > are running some sort of anti-virus program which report that you
> > > are
> > > clean) .
> > >
> > > The lame admin. at nscglobal.com/nsc-technology.com is to be
> > > blamed (The actual Symantec Anitvirus Engine seems to be runing on
> > > NSC-Technology.com) , its how he has configured his "Mail
> > > Security" that if you sent him any attachmed which he doesn't
> > > recognizes declares to be a threat !(eg vcf, even htmls !!
> > > remember text goes seperate and the formating goes seperate in a
> > > mail as an attachment)
> > >
> > > Proof ? Try sending an email to a user on that domain WITOUT any
> > > attachment (ie compose you message in plain text, no vcf no thing)
> > > and see what happens and do let me know too
> > >
> > > Cheers !
> > >
> > > Zafar
> > >
> > >
> > >
> > > On Wed, 2 Feb 2005 19:42:00 -0500, ccie2be <ccie2be@nyc.rr.com>
> > > wrote:
> > > > I'm dying of curiosity.
> > > >
> > > > Tim
> > > > ----- Original Message -----
> > > > From: "Zafar Khan" <mahaguru@gmail.com>
> > > > To: "ccie2be" <ccie2be@nyc.rr.com>
> > > > Sent: Wednesday, February 02, 2005 7:59 AM
> > > > Subject: Re: OT: Symantec Mail Security detected that you sent a
message
> > > > containing a suspicious attachment. (SY
> > > >
> > > > > Just got you mail .. I know what it is .. bit busy right now
> > > > > ..
will
> > > > > send you a detailed reply later ...
> > > > >
> > > > > Regads
> > > > > zafar
> > > > >
> > > > >
> > > > > On Wed, 2 Feb 2005 07:46:13 -0500, ccie2be
> > > > > <ccie2be@nyc.rr.com>
wrote:
> > > > > > Thanks, Here it is:
> > > > > > *******************************************************
> > > > > >
> > > > > > Return-path: <antivirus_admin@nscglobal.com>
> > > > > > Received: from ms-mta-02 (ms-mta-02-smtp [10.10.4.6]) by
> > > > > > ms-mss-02.rdc-nyc.rr.com (iPlanet Messaging Server 5.2
> > > > > > HotFix 1.21 (built Sep 8 2003)) with ESMTP id
> > > > > > <0IB9007IJ317LS@ms-mss-02.rdc-nyc.rr.com> for
> > > > > > ccie2be@nyc.rr.com; Tue, 01 Feb 2005 15:46:20 -0500 (EST)
> > > > > > Received: from nycmx03.mgw.rr.com (nycmx03.mgw.rr.com
> > [24.29.102.163])
> > > > > > by ms-mta-02.rdc-nyc.rr.com
> > > > > > (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8
> > > > > > 2003)) with ESMTP id
> > > > > > <0IB900MHR317GP@ms-mta-02.rdc-nyc.rr.com> for
> > > > > > ccie2be@nyc.rr.com (ORCPT ccie2be@nyc.rr.com); Tue, 01 Feb
> > > > > > 2005 15:46:19 -0500
(EST)
> > > > > > Received: from LDNEXCHANGE.nsc-technology.com
> > > > > > (host151.nscglobal.com [195.217.168.151] (may be forged))
> > > > > > by nycmx03.mgw.rr.com (8.12.10/8.12.8) with ESMTP id
j11KkF0U004944
> > for
> > > > > > <ccie2be@nyc.rr.com>; Tue, 01 Feb 2005 15:46:16 -0500 (EST)
> > > > > > Received: from mail pickup service by
LDNEXCHANGE.nsc-technology.com
> > > > with
> > > > > > Microsoft SMTPSVC; Tue, 01 Feb 2005 20:47:46 +0000
> > > > > > Date: Tue, 01 Feb 2005 20:47:45 +0000
> > > > > > From: antivirus_admin@nscglobal.com
> > > > > > Subject: Symantec Mail Security detected that you sent a
> > > > > > message
> > > > containing
> > > > > > a
> > > > > > suspicious attachment. (SYM:23467040680784428875)
> > > > > > To: ccie2be@nyc.rr.com
> > > > > > Message-id:
> > > > > > <095801c5089f$487ea9d0$d901a8c0@nsctechnology.com>
> > > > > > MIME-version: 1.0
> > > > > > X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> > > > > > X-Mailer: Microsoft CDO for Exchange 2000
> > > > > > Content-type: text/plain; charset=utf-8
> > > > > > Content-transfer-encoding: 7bit
> > > > > > Content-class: urn:content-classes:message
> > > > > > Importance: normal
> > > > > > Priority: normal
> > > > > > Thread-topic: Symantec Mail Security detected that you sent a
> > message
> > > > > > containing a suspicious attachment.
> > > > > > (SYM:23467040680784428875)
> > > > > > Thread-index: AcUIn0h+Glafi8GHR8mJDteC2bcMiQ==
> > > > > > X-Virus-Scanned: Symantec AntiVirus Scan Engine
> > > > > > Original-recipient: rfc822;ccie2be@nyc.rr.com
> > > > > > X-OriginalArrivalTime: 01 Feb 2005 20:47:46.0104 (UTC)
> > > > > > FILETIME=[489DA380:01C5089F]
> > > > > >
> > > > > > Subject of the message: Re: Traffic Share Count Recipient of
> > > > > > the message: "gladston@br.ibm.com"
> > > > > > <gladston@br.ibm.com>;"ccielab@groupstudy.com"
> > <ccielab@groupstudy.com>
> > > > > >
> > > > > > ************************************************************
> > > > > > *
> > > > > >
> > > > > > ----- Original Message -----
> > > > > > From: "Zafar Khan" <mahaguru@gmail.com>
> > > > > > To: "Mark Lasarko" <mlasarko@co.ba.md.us>
> > > > > > Cc: <ccie2be@nyc.rr.com>
> > > > > > Sent: Tuesday, February 01, 2005 10:47 PM
> > > > > > Subject: Re: OT: Symantec Mail Security detected that you
> > > > > > sent a
> > message
> > > > > > containing a suspicious attachment. (SY
> > > > > >
> > > > > > > Send me the Complete header of that email
> > > > > > >
> > > > > > > Regards
> > > > > > > Zafar
> > > > > > >
> > > > > > >
> > > > > > > On Tue, 01 Feb 2005 15:47:27 -0500, Mark Lasarko
> > > > <mlasarko@co.ba.md.us>
> > > > > > wrote:
> > > > > > > > Me too either.
> > > > > > > > It began a couple of days ago, this past weekend maybe?
> > > > > > > >
> > > > > > > > >>> "ccie2be" <ccie2be@nyc.rr.com> 2/1/2005 3:15:46 PM
> > > > > > > > >>> >>>
> > > > > > > >
> > > > > > > > Hi guys,
> > > > > > > >
> > > > > > > > I keep getting emails with the above subject even though
> > > > > > > > I'm
not
> > > > > > > > attaching
> > > > > > > > anything to my group study posts.
> > > > > > > >
> > > > > > > > I'm using McAfee anti-virus and the definations file is
> > > > > > > > just
one
> > day
> > > > > > > > old.
> > > > > > > >
> > > > > > > > I also use Lavasoft and Spybot Search and Destoy.
> > > > > > > >
> > > > > > > > None of these indicate I have a virus but yet I still
> > > > > > > > get
these
> > > > emails
> > > > > > > > from"Symantec".
> > > > > > > >
> > > > > > > > Anybody have any suggestions?
> > > > > > > >
> > > > > > > > TIA, Tim
> > > > > > > >
> > > > > > > >
> > > >
This archive was generated by hypermail 2.1.4 : Thu Mar 03 2005 - 08:51:16 GMT-3