The Antigen Software is the Virus Scanning software that we use on our exchange server. I did run 2 scan this morning, I apologize if you received multiple iterations of the message, I am trying to clean up the mess left by the myparty virus. The software is not misconfigured that I am aware of, it is set to send 3 messages... One is sent to the originator of the message to make sure they are aware the workstation has a virus One is sent to the recipient letting them know that the attachment was stripped Also one goes to me so that I can follow up and make sure that nothing was infected. I will look at the software to make sure that the configuration is still correct. Thank you for your concern. Missy Koos Career Services and Placement -----Original Message----- From: Marc Conlin [mailto:[log in to unmask]] Sent: Monday, January 28, 2002 12:51 PM To: [log in to unmask] Subject: Misconfigured Software I've received several copies of the two messages below (on a workstation) this morning. I am guessing that whatever systems and software is sending them needs to have changes made in their configurations. The second message is using our pa.msu.edu domain as a "From" address, which we would like corrected ASAP. Thanks. Marc Conlin Physics and Astronomy ====================================================================== Return-Path: <[log in to unmask]> Received: from hrnt2.hr.msu.edu (hrnt2.hr.msu.edu [35.8.31.211]) by kepler.pa.msu.edu (8.10.2+Sun/8.10.2) with ESMTP id g0SDhxP02726; Mon, 28 Jan 2002 08:43:59 -0500 (EST) Received: by hrnt2.hr.msu.edu with Internet Mail Service (5.5.2653.19) id <DSQQFCJ8>; Mon, 28 Jan 2002 08:44:52 -0500 Received: from shire.ssb.msu.edu (csp.msu.edu [35.8.76.176]) by hrnt2.hr.msu.edu with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id DSQQFCJF; Mon, 28 Jan 2002 08:44:38 -0500 Received: by csp.msu.edu with Internet Mail Service (5.5.2653.19) id <DABX2SWX>; Mon, 28 Jan 2002 08:40:34 -0500 From: ANTIGEN_SHIRE <[log in to unmask]> To: TimeAttendanceSA <[log in to unmask]> Message-ID: <[log in to unmask]> Subject: Antigen found =*.com file Date: Mon, 28 Jan 2002 08:40:34 -0500 MIME-Version: 1.0 X-Mailer: Internet Mail Service (5.5.2653.19) Content-Type: multipart/alternative; boundary="----_=_NextPart_001_01C1A801.5CBB0A80" Content-Length: 1225 X-UID: 17009 Antigen for Exchange found Unknown->www.myparty.yahoo.com matching =*.com file filter. The file is currently Removed. The message, "new photos from my party!", was sent from SHAULIS, CAROL and was discovered in IMC Queues\Inbound located at Michigan State University/CSP/SHIRE. ====================================================================== Return-Path: <[log in to unmask]> Received: from hrnt2.hr.msu.edu (hrnt2.hr.msu.edu [35.8.31.211]) by kepler.pa.msu.edu (8.10.2+Sun/8.10.2) with ESMTP id g0SDi0P02729; Mon, 28 Jan 2002 08:44:00 -0500 (EST) Received: by hrnt2.hr.msu.edu with Internet Mail Service (5.5.2653.19) id <DSQQFCJ0>; Mon, 28 Jan 2002 08:44:53 -0500 Received: from BIGHORN.rad.msu.edu (rad-159-35.rad.msu.edu [35.8.159.35]) by hrnt2.hr.msu.edu with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13) id DSQQFCJ1; Mon, 28 Jan 2002 08:44:37 -0500 Received: from mail pickup service by BIGHORN.rad.msu.edu with Microsoft SMTPSVC; Mon, 28 Jan 2002 08:43:45 -0500 From: [log in to unmask] To: TimeAttendanceSA <[log in to unmask]> Subject: Antigen found =*.com file Message-ID: <[log in to unmask]> X-OriginalArrivalTime: 28 Jan 2002 13:43:45.0879 (UTC) FILETIME=[CEAA5E70:01C1A801] Date: 28 Jan 2002 08:43:45 -0500 Content-Length: 270 X-UID: 17010 Antigen for Exchange found Unknown->www.myparty.yahoo.com matching =*.com file filter. The file is currently Removed. The message, "new photos from my party!", was sent from SHAULIS, CAROL and was discovered in SMTP Messages\Inbound located at Unknown/Unknown/BIL.