RE: Sircam Virus and AS/400 -- MIDRANGE-L

Title: RE: Sircam Virus and AS/400

You're assuming that the message is a result of an open relay machine. I think the original sender was internal to this companies network so this document wouldn't have helped. Actually, what is needed is anti-virus software for the SMTP server on the 400.

-----Original Message-----
From: Murphy, Guy [mailto:murphy@uif.uillinois.edu]
Sent: Thursday, July 26, 2001 4:26 PM
To: 'MIDRANGE-L@midrange.com'
Subject: RE: Sircam Virus and AS/400

You should contact (if you can) the manager of the offending AS/400 and point them to the following document:

http://as400service.ibm.com/s_dir/slkbase.NSF/3cdf5d853ca698198625680b00020369/7e4b7e75feb42622862567bb00771fe2?OpenDocument&Highlight=0,smtp,spam

It might also be worthwhile for this site to journal smtp. Check http://www.as400.ibm.com/tstudio/tech_ref/tcp/journal/indexfr.htm

for details.

Guy Murphy - murphyfa@uiuc.edu
FACTS system - University of Illinois
217-333-8670
www.heisercoaching.com

-----Original Message-----
From: Walden H. Leverich [mailto:WaldenL@TechSoftInc.com]
Sent: Thursday, July 26, 2001 2:01 PM
To: 'midrange-l@midrange.com'
Subject: Sircam Virus and AS/400

Names changed to protect the [not so] innocent, but otherwise the exact
headers that hit my machine last night. Note the second "Received:" line.

-Walden

-------------- Header Start --------------
Received: from xxxxxx.xxxxx_WEB (40324257.ptr.xxx.xxxxxxxx.net
[xx.50.xx.87]) by neptune.techsoftwareinc.com with SMTP (Microsoft Exchange
Internet Mail Service Version 5.5.2653.13)
id PJ6L44VL; Wed, 25 Jul 2001 20:35:40 -0400
Received: from dxx-norxxxxx([192.168.1.73]) by xxxxxx.xxxxx_WEB (IBM OS/400
SMTP V04R05M00) with TCP; Wed, 25 Jul 2001 20:35:30 -0400
From: "Dxx Norxxxxx"<Dxx.Norxxxxx@xxxxx.COM>
To: WaldenL@techsoftinc.com
Subject: Vendor File 2001
date: Wed, 25 Jul 2001 20:39:20 -0400
MIME-Version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
Content-Type: multipart/mixed;
boundary="----4D0AC425_Outlook_Express_message_boundary"
Content-Disposition: Multipart message
-------------- Header End --------------

------------
Walden H Leverich III
President
Tech Software
(516)627-3800 x11
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com