Advice please.....W32.Beagle.X@mm

  • Thread starter Thread starter John L
  • Start date Start date
J

John L

Hi everyone,

Could someone please have look at this returned mail message ?

1. I didn't send the email.
2. I don't know the recipient at all.

Some background-
My Win2K OS was trashed by the CWW trojan a couple of
weeks ago. I reformatted my HDD and re-installed Win2K, grabbed
a CDROM from a friend, and installed SpywareBlaster, Spybot S & D,
AdAware, ZoneAlarm, and the evaluation version of bitdefender 8
(Standard).

According to bitdefender, my system is clean. In fact, the only
thing identifiedon my system is Alexa, which I haven't removed yet
(paranoid about messing with registry until I learn more about it).

The text below is a copy of the returned mail mssg I received. (I've
placed the asterisks to preserve anonymity)
This is the 3rd such email - the previous 2 emails had the virus
identified as W32.Beagle@xx!mm.

Any ideas / comments much appreciated.
Thanks,
John

****************************

Date: Thu, 16 Dec 2004 06:36:23 -0500 (EST)
From: Mail Delivery Subsystem <[email protected]>
To: <p****@erols.com>
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)


The original message was received at Thu, 16 Dec 2004 06:36:11 -0500
(EST)
from pool-68-***-225-80.nwrk.east.verizon.net [68.***.225.80]


----- The following addresses had permanent fatal errors -----
<r****@twcny.rr.com>
(reason: 550 5.1.6 Recipient no longer on server:
(e-mail address removed))


----- Transcript of session follows -----
.... while talking to ms-mta-02-fn.nyroc.rr.com.:<<< 550 5.1.6 Recipient no longer on server: (e-mail address removed)
550 5.1.1 <r****@twcny.rr.com>... User unknown
<<< 554 5.5.0 No recipients have been specified.
Reporting-MTA: dns; nymx02.mgw.rr.com
Received-From-MTA: DNS; pool-68-***-225-80.nwrk.east.verizon.net
Arrival-Date: Thu, 16 Dec 2004 06:36:11 -0500 (EST)


Final-Recipient: RFC822; r****@twcny.rr.com
Action: failed
Status: 5.1.6
Remote-MTA: DNS; ms-mta-02-fn.nyroc.rr.com
Diagnostic-Code: SMTP; 550 5.1.6 Recipient no longer on server:
(e-mail address removed)
Last-Attempt-Date: Thu, 16 Dec 2004 06:36:23 -0500 (EST)
Received: from SYSTEM.net (pool-68-***-225-80.nwrk.east.verizon.net
[68.***.225.80])
by nymx02.mgw.rr.com (8.12.10/8.12.8) with SMTP id
iBGBa8mE005603
for <r****@twcny.rr.com>; Thu, 16 Dec 2004 06:36:11 -0500 (EST)
Date: Thu, 16 Dec 2004 06:36:05 -0500
To: "R**" <r****@twcny.rr.com>
From: "P***" <p****@erols.com>
Subject: New changes
Message-ID: <i************[email protected]>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------eiaeblfzkklvjddktxuz"
X-Virus-Scanned: Symantec AntiVirus Scan Engine
X-Virus-Scan-Result: Repaired 33994 W32.Beagle.X@mm
 
John said:
Hi everyone,

Could someone please have look at this returned mail message ?

1. I didn't send the email.
2. I don't know the recipient at all.
Click to expand...

If you know for a fact your computer didn't send the email, then ignore it.

I personally have had a few bounced email saying I tried to send a
virus/spam, and know of lots of other people who have had the same - even
when they have never had any dealings with the recipient address, ever.

It's a trait of a lot of mass-mailing viruses to spoof their From: address,
I don't worry about it and I'd say you don't need to either :-)


aD
 
Hi aD,

Since my system is clean (it IS and old virus - and bitdefender seems
to be held in very high regard) I feel confident that what I received
was the result of the virus spoofing my addy from elsewhere, something
I didn't know viruses could do.

Thanks very much for your reply,
John.
 
Back
Top