Strange Behaviour

Discussion in 'other security issues & news' started by Warbird, Apr 19, 2004.

Thread Status:
Not open for further replies.
  1. Warbird

    Warbird Registered Member

    Joined:
    Apr 19, 2004
    Posts:
    1
    I am running WinXP Professional and use Outlook Express for email. I hope someone can help answer my question.

    I keep recieving an email that has no header, no subject, no sender and even no content. In other words a completely blank message.

    When I click on message properties, the following shows up. Since there is nothing there I can't believe it is spam and I am wondering if there is something sinister I should worry about. I have recieved this message at least 10 times in the last couple of weeks and I'm not sure if they all came from the same sender as I only became concerned about it recently.

    Return-Path: <fpowjltwgz@christianmail.net>
    Received: from c-24-11-231-83.client.comcast.net ([24.11.231.83])
    by tomts3-srv.bellnexxia.net
    (InterMail vM.5.01.06.05 201-253-122-130-105-20030824) with SMTP
    id <20040419170828.MZEA5777.tomts3-srv.bellnexxia.net@c-24-11-231-83.client.comcast.net>;
    Mon, 19 Apr 2004 13:08:28 -0400
    X-Message-Info: 339unyTMKcF4GGMiD0W2YMPfEUybsC[1
    Message-Id: <20040419170828.MZEA5777.tomts3-srv.bellnexxia.net@c-24-11-231-83.client.comcast.net>
    Date: Mon, 19 Apr 2004 13:08:29 -0400

    On another note that may or may not be related, I have noticed that my Norton Script Blocking services mysteriously stops in my Windows Admin tools and I have had to restart it at least twice today.

    I have run Adaware, Spybot, Norton and Hijack This, my system shows as clean. I even have Spyware Blaster running.

    Here is my task list if it means anything. The system is an IBM T30

    Process PID CPU Description Company Name
    System Idle Process 0 93.20
    Interrupts 0 0.97 Hardware Interrupts
    DPCs 0 1.94 Deferred Procedure Calls
    System 4
    smss.exe 692 Windows NT Session Manager Microsoft Corporation
    csrss.exe 760 Client Server Runtime Process Microsoft Corporation
    winlogon.exe 796 Windows NT Logon Application Microsoft Corporation
    services.exe 840 Services and Controller app Microsoft Corporation
    ibmpmsvc.exe 1040
    svchost.exe 1124 Generic Host Process for Win32 Services Microsoft Corporation
    BTStackServer.exe 256 Bluetooth Stack COM Server WIDCOMM Inc.
    svchost.exe 1220 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 1456 Generic Host Process for Win32 Services Microsoft Corporation
    svchost.exe 1536 Generic Host Process for Win32 Services Microsoft Corporation
    spoolsv.exe 1840 Spooler SubSystem App Microsoft Corporation
    NAVAPSVC.EXE 632 Norton AntiVirus Auto-Protect Service Symantec Corporation
    snmp.exe 732 SNMP Service Microsoft Corporation
    TPCHRSRV.EXE 1292
    SMAgent.exe 2456 SoundMAX service agent component Analog Devices, Inc.
    lsass.exe 852 LSA Shell (Export Version) Microsoft Corporation
    explorer.exe 1528 1.94 Windows Explorer Microsoft Corporation
    SynTPLpr.exe 1904 TouchPad Driver Helper Application Synaptics, Inc.
    SynTPEnh.exe 1916 Synaptics TouchPad Enhancements Synaptics, Inc.
    TP98TRAY.EXE 1924 IBM ThinkPad Tray Utility IBM Corp.
    TPHKMGR.exe 1932
    TPONSCR.exe 144
    TpScrex.exe 184 ThinkPad UltraZoom IBM Corporation
    NAVAPW32.EXE 1944 Norton AntiVirus Agent Symantec Corporation
    BTTray.exe 168 Bluetooth Tray Application WIDCOMM Inc.
    msimn.exe 412 Outlook Express Microsoft Corporation
    iexplore.exe 3496 Internet Explorer Microsoft Corporation
    AcroRd32.exe 3632 0.97 Adobe Reader 6.0 Adobe Systems Incorporated
    mmc.exe 2844 Microsoft Management Console Microsoft Corporation
    procexp.exe 3004 0.97 Sysinternals Process Explorer Sysinternals
    javaw.exe 1868
    NMain.exe 2468 Norton Integrator Symantec Corporation

    Process: Procexp Pid: -2

    Thank you in advance to everybody :D
     
  2. wawadave

    wawadave Registered Member

    Joined:
    Mar 21, 2004
    Posts:
    12
    undefined
    HELLO
    it sounds like a virus email. you should delete them. and better yet get mail washer and preview your mail on the sever. as there are some new variations of net sky that don,t even need an atchment to infect you. just clicking on then in outlook virus express will let them run. :blink:
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.