Taff107

I keep getting unsent mail returned indicating that I have MyDoom A. I've run a virus check and downloaded a standalone MyDoom A detector, but they find nothing. Anyone know where I can get a MyDoom B detector or have any suggestions?


[Edited by Taff107 - 1/31/2004 6:22:25 PM]

Taff107

This is what I've had:

Attention: matt@taffdavies.co.uk


A virus was found in an Email message you sent.
This Email scanner intercepted it and stopped the entire message reaching its destination.

The virus was reported to be:

virus WORM_MYDOOM.A


Please update your virus scanner or contact your IT support
personnel as soon as possible as you may have a virus on your system.


Your message was sent with the following envelope:

MAIL FROM: matt@taffdavies.co.uk
RCPT TO: alice@motorsm.com

... and with the following headers:

---
MAILFROM: matt@taffdavies.co.uk
Received: from spr2-macc1-5-0-cust196.manc.broadband.ntl.com (HELO taffdavies.co.uk) (81.98.187.196)
by wipeout.pipeline.com.au with SMTP; 1 Feb 2004 02:55:42 +1100
From: matt@taffdavies.co.uk
To: alice@motorsm.com
Subject: Mail Transaction Failed
Date: Sat, 31 Jan 2004 15:55:36 +0000
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0005_D1231992.7BAA67E5"
X-Priority: 3
X-MSMail-Priority: Normal


---


Who the hell 'matt' is, using the address "matt@taffdavies.co.uk" I don't know and I've never sent any mail to alice@motorsm.com

Nicks VR4

http://vil.nai.com/vil/stinger/

Does Mydoom and I would presume the B version would also be detected as there is not much diffrence in the 2 AFAIK

read this too
The virus arrives in an email message as follows:

From: (Spoofed email sender)
Do not assume that the sender address is an indication that the sender is infected. Additionally you may receive alert messages from a mail server that you are infected, which may not be the case.

Taff107

I've tried the Stinger and it came back clean. taffdavies.co.uk is my domain but there is no 'matt' associated with it. I think that my computer may not be infected as I have checked about 5 or 6 times now and still nowt.

what would scooby do

YOU DONT HAVE A VIRUS

It's other people who have - it spoofs the senders address - I get about 50 a day, my system just deletes these messages

clever stuff eh - there's more "betterer" explanations if you look back through some older posts here..