WorldSecure Server

Discussion in 'malware problems & news' started by rerun2, Jul 9, 2004.

Thread Status:
Not open for further replies.
  1. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    I have just received an email from WorldSecure Server. It states...

    "The Internet Email Gateway does not accept file extensions of this type.
    This is an automated response. Please do not respond to this email
    address.
    Your message was only partially delivered because some virus-infected
    attachments were removed.

    You may wish to resend all or part of the message after removing the
    viruses from its attachments."

    However I have not sent any emails lately with attachments (let alone one that contained anything with a suspect extension). Would this WorldSecure Server warning be from my email carrier? Would it be possible to inquire and ask for more information about this suspect email?
     
    rerun2, Jul 9, 2004
    #1
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,760
    Location:
    Texas

    Sounds like someone who has your email address in their address list has a virus and it is harvesting addresses and sending mail.

    What does your email header say?

    worm.somefool.q
     
    Last edited: Jul 9, 2004
    ronjor, Jul 9, 2004
    #2
  3. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    From: "WorldSecure Server" <postmaster1@us.loreal.com>
    MIME-Version: 1.0
    Message-ID: <6CF003E89277932-01@WorldSecure_Server>
    Received: (qmail 29870 invoked by uid 1003); 9 Jul 2004 17:56:47 -0000
    from by mx1.***.net by uid 89 with qmail-scanner-1.20 (clamscan: 0.65. spamassassin: 2.63. Clear:RC:0(198.16.0.225):SA:0(-2.8/5.0):. Processed in 1.77342 secs); 09 Jul 2004 17:56:47 -0000
    from unknown (HELO uscorwss1.us.loreal.com) (198.16.0.225) by rrcs-west-67-52-59-245.biz.rr.com with SMTP; 9 Jul 2004 17:56:45 -0000

    mx1.***.net signifies my email carrier
     
    rerun2, Jul 9, 2004
    #3
  4. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,760
    Location:
    Texas

    I dug around and found a reference to a similar problem. You are using Clam AV?
    You might want to check with them.


    note
     
    ronjor, Jul 9, 2004
    #4
  5. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    Thank you for the feedback ronjor, it is much appreciated. Actually Clam AV appears to be the AV my email carrier is using ;)

    Is this email a normal reply when Clam AV detects a suspicious attachment?
     
    rerun2, Jul 10, 2004
    #5
  6. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    163,760
    Location:
    Texas
    So you have no infection?

    As far as Clam AV, my knowledge is nil.



    Clam AV
     
    ronjor, Jul 10, 2004
    #6
  7. rerun2

    rerun2 Registered Member

    Joined:
    Aug 27, 2003
    Posts:
    338
    I do not believe that I do, but will be sure to look into it more. Might be a false positive in ClamAV? Emails I am sending now seem to be ok and arriving at their destination, though Im sure that can not be taken as a clear indication these days :doubt:
     
    rerun2, Jul 12, 2004
    #7
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...