Another "Web Server Report" Virus Email
12/06/06
Permalink 04:29:53 am, by dave Email , 347 words, 239 views English (US)
Categories: Security, Virus Info, Virus Emails
Another "Web Server Report" Virus Email
I just received another Win32.Warezov.dc virus email.
This time the spoofed from address was:
secur@scholzes.com
There is no website, that I could find, for scholzes.com. The email I received originated from a block of addresses that used by an internet provider in another part of the country, so it is unlikely that this message was actually sent from anyone at this domain.
The body of this message is:
Mail server report.
Our firewall determined the e-mails containing worm copies are being sent from your computer.
Nowadays it happens from many computers, because this is a new virus type (Network Worms).
Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses
Please install updates for worm elimination and your computer restoring.
Best regards,
Customers support service
Any way if you see anything like this, don't open it, just DELETE IT.
Here is the header information from this message (my info has been changed slightly, but the rest remains the same).
Return-path:
Envelope-to: someaddy@davemoats.com
Delivery-date: Wed, 06 Dec 2006 09:25:29 -0700
Received: from unknown (HELO gcopghgraia) (70.182.174.151)
by 70.182.174.65 with SMTP; Wed, 6 Dec 2006 10:24:23 -0000
Date: Wed, 6 Dec 2006 10:16:23 -0600
From: secur@scholzes.com
Mime-Version: 1.0
To: someaddy@davemoats.com
Subject: Mail server report.
Content-Type: multipart/mixed;
boundary="-----------20CC820E3832E623"
-------------20CC820E3832E623
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Mail server report.
Our firewall determined the e-mails containing worm copies are being sent from your computer.
Nowadays it happens from many computers, because this is a new virus type (Network Worms).
Using the new bug in the Windows, these viruses infect the computer unnoticeably.
After the penetrating into the computer the virus harvests all the e-mail addresses and sends the copies of itself to these e-mail
addresses
Please install updates for worm elimination and your computer restoring.
Best regards,
Customers support service
-------------20CC820E3832E623
Content-Type: APPLICATION/OCTET-STREAM; name="Update-KB6062-x86.zip"
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="Update-KB6062-x86.zip"