User Name Password Register
DaniWeb IT Discussion Community
All
What is DaniWeb IT Discussion Community?
You're currently browsing the Viruses, Spyware and other Nasties section within the Tech Talk category of DaniWeb, a massive community of 426,020 software developers, web developers, Internet marketers, and tech gurus who are all enthusiastic about making contacts, networking, and learning from each other. In fact, there are 1,661 IT professionals currently interacting right now! Registration is free, only takes a minute and lets you enjoy all of the interactive features of the site.
Please support our Viruses, Spyware and other Nasties advertiser: Programming Forums
Views: 2364 | Replies: 4 | Solved
Reply
Join Date: Apr 2005
Posts: 20
Reputation: whiskeyjar2005 is an unknown quantity at this point 
Rep Power: 4
Solved Threads: 0
whiskeyjar2005 whiskeyjar2005 is offline Offline
Newbie Poster

Mass e-mail being produced with Microsoft Outlook Web Access link as subject line

  #1  
May 5th, 2005
Please help - a colleague of mine noticed yesterday that e-mails were being generated from his machine to people in his address book with a dead link as the subject line:
Microsoft Outlook Web Access: http://DA-REALM-WMA01/Exchange/wmyer...v.EML?cmd=open
The subject line of the e-mail is vv . bv
The colleague has received numerous e-mails from people saying they cannot open the link, and it appears that the e-mail is attempting to invite them to a meeting with a date in April. One person who received the e-mail actually received an invitation to join the meeting; everyone else has attempted to click on the link, but nothing happens.
The machine is running XP with Outlook 2003. I have scanned it with Symantec AV and Microsoft Spyware software, but nothing has been found. Any suggestions?
AddThis Social Bookmark Button
Reply With Quote  
Join Date: Dec 2003
Location: Marin County, CA
Posts: 6,439
Reputation: DMR will become famous soon enough DMR will become famous soon enough 
Rep Power: 18
Solved Threads: 339
Colleague
DMR's Avatar
DMR DMR is offline Offline
Wombat At Large

Re: Mass e-mail being produced with Microsoft Outlook Web Access link as subject line

  #2  
May 5th, 2005
In addition to your Symantec scan, you should do a least two of the following free online virus/spyware scans; they may catch things that Symantec didn't:

http://www.kaspersky.com/scanforvirus.html
http://housecall.trendmicro.com/
http://www.pandasoftware.com/actives..._principal.htm
http://us.mcafee.com/root/mfs/default.asp?cid=9914
http://www.ravantivirus.com/scan/

Let us know what (if anything) those scans found, and if they were able to remove the mailer infection.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing


Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.

However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Reply With Quote  
Join Date: Apr 2005
Posts: 20
Reputation: whiskeyjar2005 is an unknown quantity at this point 
Rep Power: 4
Solved Threads: 0
whiskeyjar2005 whiskeyjar2005 is offline Offline
Newbie Poster

Re: Mass e-mail being produced with Microsoft Outlook Web Access link as subject line

  #3  
May 5th, 2005
Thank you for the suggestion. I will try that and let you know.
Reply With Quote  
Join Date: Dec 2003
Location: Marin County, CA
Posts: 6,439
Reputation: DMR will become famous soon enough DMR will become famous soon enough 
Rep Power: 18
Solved Threads: 339
Colleague
DMR's Avatar
DMR DMR is offline Offline
Wombat At Large

Re: Mass e-mail being produced with Microsoft Outlook Web Access link as subject line

  #4  
May 5th, 2005
OK; we'll be here...


If the online scans don't help, do the following:

Download the (free) HijackThis utility.

Once downloaded:

Create a folder outside of any Temp/Temporary folders for HJT and move it there. A folder such such as C:\HijackThis or C:\Spyware Tools\HijackThis will do.

Run HijackThis, but do not have HJT fix anything yet; only have it scan your system! Once the scan is complete, the "Scan" button will turn into an option to "Save log...". Save the log in the folder you created for HiajckThis, open the log in Windows Notepad, and cut-n-paste the entire contents of the log here.

The log contents can tell us a lot about what "nasties" have crept into your system, and once we analyse the log we can tell you what to do from there.
"May the Wombat of Happiness snuffle through your underbrush."
- Ancient Aborigine blessing


Please do not contact me by email or PM for help. We're all volunteers here, and only have so much free time to dedicate to our efforts.

However, if I've been working on a thread with you already, and seem to have "forgotten" your thread, please do send me a message. I try not to let things slip through the cracks, but it does happen sometimes.
Reply With Quote  
Join Date: Apr 2005
Posts: 20
Reputation: whiskeyjar2005 is an unknown quantity at this point 
Rep Power: 4
Solved Threads: 0
whiskeyjar2005 whiskeyjar2005 is offline Offline
Newbie Poster

Re: Mass e-mail being produced with Microsoft Outlook Web Access link as subject line

  #5  
May 10th, 2005
Thank you so much for the suggestion. Someone else took over the problem while I was at lunch and all appears to be well (the person was in a hurry and needed it NOW), so I have no more to report. I appreciate your responses and advice.
Reply With Quote  
Reply

Only community members can participate in forum threads. You must register or log in to contribute.

DaniWeb Viruses, Spyware and other Nasties Marketplace
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

 

Thread Tools Display Modes

Similar Threads
Other Threads in the Viruses, Spyware and other Nasties Forum

All times are GMT -4. The time now is 1:35 am.
Forum system based on vBulletin Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
©2003 - 2008 DaniWeb® LLC