Confusing incident

[Suzie]

I've been receiving the klez virus daily( 3 to 5 emails a day ), Norton always quarentines it.

Today I checked my sent messages and there was a sent message that definately wasn't one of ours. My sent messages aways shows the sender as myself. This one showed someone named Penny. It wasn't forwarded or anything. I read it thru message source, didn't actually open it, there wasn't any attachment. So I scanned and did 2 online scans, I come up clean.

So how did this unknown sent message end up in there?? I'm like totally baffled over this. Can someone explain to me what this was and how it got there??

Thanks for your time:)

[Croc]

Hi Suzie,
Maybe TonyT will be able to give a reason for that email but I was under the impression this virus would not cause problems if you were running the SP2 upgrade in IE5.01 or IE5.5 or using IE6. That's what the virus info pages at TrendMicro and Symantic say.
Are you running SP2? That may be a place to start.

Take care.

Croc.

[Suzie]

Hi Croc:)

Running IE6 and all up to date. I went to all my bookmarked security sites yesterday and tried to find an answere, came up empty handed.

Just not sure what to think about it. It's just weird.

Thanks.

[Dunster]

Suzie, you running (or have) any antivirus programs? Maybe a quick check with The Cleaner by MooSoft (free 30 day trial download) would anwer any questions as far as having a trojan causing this.

[TonyT]

http://www.symantec.com/avcenter/venc/data/w32.klez.h@mm.html

Go here and get the removal tool for that virus.

You may have received it prior to having the updated virus definitions in Norton AV.

Also, I suggest that you configure Norton to delete those emails when they arrive rather than quarantine them. Quarentined viruses are STILL on your computer intact. They are stored in a Noton compressed file that cannot be executed, but nevertheless they are still there. Someday, some jerk will design a virus that unlocks quarentined viruses!

[Suzie]

Originally posted by TonyT
http://www.symantec.com/avcenter/venc/data/w32.klez.h@mm.html

Go here and get the removal tool for that virus.

You may have received it prior to having the updated virus definitions in Norton AV.

Also, I suggest that you configure Norton to delete those emails when they arrive rather than quarantine them. Quarantined viruses are STILL on your computer intact. They are stored in a Norton compressed file that cannot be executed, but nevertheless they are still there. Someday, some jerk will design a virus that unlocks quarantined viruses!

Thanks everyone :)

TonyT

Our Norton has been updated regularly, usually updates out twice a week. After a virus last summer I'm always miss paranoia. Ran the removal tool and it says we're clean.

I usually delete them as soon as they are quarantined but I'll give the automatic delete a try. A question about the auto delete though, usually when it's quarantined it leaves a copy in the mailbox, that we delete and then empty the deleted folder. With the auto delete checked in Norton will it delete the message in the mailbox also?? Just makes me nervous if someone else gets the mail and then they open the copy left.

One last thing, I came home last weekend to find 3 script virus's quarantined from when my son was on. Could there be something there I should be looking at? The message I found sent was sent 04/30/02

Dunster I'll give the Trojan scan a try.

So what do you think, are we clean as far a virus??

Thanks for your time.

[TonyT]

Norton will noot delete your email messages. Manually delete them or set up a rules for the email to get auto deleted.

Then set up OE (in options) to empty deleted items folder on exit or Edit Menu\select all\delete in the deleted items folder.

[Suzie]

Originally posted by TonyT
Norton will noot delete your email messages. Manually delete them or set up a rules for the email to get auto deleted.

Then set up OE (in options) to empty deleted items folder on exit or Edit Menu\select all\delete in the deleted items folder.

Thanks TonyT.

I'll set that up. Scanned and no trojan either so I guess I'll have to keep an eye on our sent messages to see if there are any others.

Thanks again