NAC - does anyone else get these emails?

[Rokas Reipa]

You're probably infected by the Sobig.F virus. Go to www.symantec.com, get
the removal tool and run it. It's becoming more and more rampant. Also
remember to update your virus definitions. HTH,


Rokas
93 100s RIP

On Thu, 21 Aug 2003 JordanVw at aol.com wrote:

> --
> [ Picked text/plain from multipart/alternative ]
> just wondering if anyone else is getting repeated emails like the one
> below..i havent  opened it, its most likely a virus?
>
>
> chris
>
>
>
> Subj:   Mail delivery failed: returning message to sender
> Date:   8/21/03 11:47:11 AM Eastern Daylight Time
> From:   <A HREF="mailto:Mailer-Daemon at installerassist.com">Mailer-Daemon at installerassist.com</A>
> To: <A HREF="mailto:jordanvw at aol.com">jordanvw at aol.com</A>
> File:   Maildeli.txt (100729 bytes) DL Time (26400 bps): < 1 minute
> Sent from the Internet (Details)
>
>
>
> [Only the first part of this message is displayed. The entire message has
> been turned into a text attachment, which you can retrieve by selecting Download.
> Once downloaded, open it with a word processor or text editor for reading.]
>
> This message was created automatically by mail delivery software (Exim).
>
> A message that you sent could not be delivered to one or more of its
> recipients. This is a permanent error. The following address(es) failed:
>
>   dubhunt at hostdub.com
>     This message has been rejected because it has
>     a potentially executable attachment "application.pif"
>   This form of attachment has been used by
>     recent viruses or other malware.
>     If you meant to send this file then please
>     package it up as a zip file and resend it.
>
> ------ This is a copy of the message, including all the headers. ------
>
> Return-path: <jordanvw at aol.com>
> Received: from [64.251.230.108] (helo=DD80141)
>   by mail.atheosonline.com with esmtp (Exim 3.36 #1)
>     id 19pqcd-0005Da-00
>     for dubhunt at hostdub.com; Thu, 21 Aug 2003 09:41:07 -0500
> From: <jordanvw at aol.com>
> To: <dubhunt at hostdub.com>
> Subject: Re: Your application
> Date: Thu, 21 Aug 2003 9:46:06 --0600
> X-MailScanner: Found to be clean
> Importance: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2600.0000
> X-MSMail-Priority: Normal
> X-Priority: 3 (Normal)
> MIME-Version: 1.0
> Content-Type: multipart/mixed;
>     boundary="_NextPart_000_00A48399"
> Message-Id: <E19pqcd-0005Da-00 at mail.atheosonline.com>
>
> This is a multipart message in MIME format
>
> --_NextPart_000_00A48399
> Content-Type: text/plain;
>     charset="iso-8859-1"
> Content-Transfer-Encoding: 7bit
>
> Please see the attached file for details.
> --_NextPart_000_00A48399
> Content-Type: application/octet-stream;
>     name="application.pif"
> Content-Transfer-Encoding: base64
> Content-Disposition: attachment;
>     filename="application.pif"
>
> TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> AAAA4AAAAA4fug4AtAnNIbgBTM0hVGhpcyBwcm9ncmFtIGNhbm5vdCBiZSBydW4gaW4gRE9TIG1v
> ZGUuDQ0KJAAAAAAAAADToEjPl8EmnJfBJpyXwSacFN0onI3BJpx/3iyc7cEmnMHeNZyawSacl8Em
> nJTBJpyXwSecBsEmnPXeNZyawSacf94tnI3BJpxSaWNol8EmnAAAAAAAAAAAAAAAAAAAAABQRQAA
> TAEEAF2zPz8AAAAAAAAAAOAADwELAQYAAAAAAABwAAAAA
>