Romantic Husband Virus?

[MattWray]

Anyone seen this one? My Norton Gateway has had this hitting it every 60 seconds. I called the IT dept of where it is coming from, but they were very disbelieving. The subject line is Romantic Husband, and like I said it is hitting every 60 seconds....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[KimberTech]

Do a search on an antivirus company website for

W32.HLLW.Syney@mm

and see if this is what you are experiencing.

Mass mailer, there are several others that may fit your description.

Post back and let us know...

K

Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was previously addressed in a thread or FAQ.

 

[MattWray]

Thanks KimberTech, but that's not it. I can't find anything like it. It has a subject line of Romantic Husband no body and an attachment of Romantic Husband.asf. So far it has mailed to my mail server over 800 times, it is becoming very much a nuisance....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

 

[KimberTech]

I would do a virus submission to whoever you are using as antivirus and let them have a look.

I haven't been able to find anything....but if I do I will post here right away.
Let me know if you find anything else out..

Curious to know, is the FROM field the same?
Have you looked at the properties of the mail to get the header info etc.?
I would start there...might give us some clues.

K

Members of Tek-Tips provide answers to questions based on the information given. For the best answers, post detailed descriptions of the issue. Use the search features of the site to see if your issue was previously addressed in a thread or FAQ.

 

[wbg34]

It might be the new Yaha.z, but I can't say for sure. Here are some places where you can submit virus samples.

http://www.symantec.com/avcenter/submit.html

http://www.ravantivirus.com/support/submit-file.php

https://www.my-etrust.com/services/virusSample.cfm

 

[MattWray]

I only had one that I let thru to view header info and such, and I have already deleted it now.
My security gateway was deleting it before it reached into our network, but I did send the header info as well as the Norton gateway report to both the postmaster of the Exchange and the person it was from.
It has since stopped, so hopefully they killed it and it didn't just deactivate for now.....
Anyways, watch out for that subject line, as I think it is a virus.....
Thanks all!

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com