The
Antigen Software is the Virus Scanning software that we use on our exchange
server.
I did
run 2 scan this morning, I apologize if you received multiple iterations of the
message, I am trying to clean up the mess left by the myparty
virus.
The
software is not misconfigured that I am aware of, it is set to send 3
messages...
One is
sent to the originator of the message to make sure they are aware the
workstation has a virus
One is
sent to the recipient letting them know that the attachment was
stripped
Also
one goes to me so that I can follow up and make sure that nothing was
infected.
I will
look at the software to make sure that the configuration is still
correct.
Thank
you for your concern.
Missy
Koos
Career
Services and Placement
I've received several copies of the two messages
below (on a workstation) this morning. I am guessing that whatever
systems and software is sending them needs to have changes made in their
configurations.
The second message is using our pa.msu.edu domain as a
"From" address, which we would like corrected ASAP.
Thanks.
Marc
Conlin
Physics and
Astronomy
======================================================================
Return-Path:
<[log in to unmask]>
Received: from hrnt2.hr.msu.edu
(hrnt2.hr.msu.edu
[35.8.31.211])
by
kepler.pa.msu.edu (8.10.2+Sun/8.10.2) with ESMTP id
g0SDhxP02726;
Mon,
28 Jan 2002 08:43:59 -0500 (EST)
Received: by hrnt2.hr.msu.edu with
Internet Mail Service
(5.5.2653.19)
id
<DSQQFCJ8>; Mon, 28 Jan 2002 08:44:52 -0500
Received: from
shire.ssb.msu.edu (csp.msu.edu [35.8.76.176]) by hrnt2.hr.msu.edu with SMTP
(Microsoft Exchange Internet Mail Service Version
5.5.2653.13)
id
DSQQFCJF; Mon, 28 Jan 2002 08:44:38 -0500
Received: by csp.msu.edu with
Internet Mail Service
(5.5.2653.19)
id
<DABX2SWX>; Mon, 28 Jan 2002 08:40:34 -0500
From: ANTIGEN_SHIRE <[log in to unmask]>
To:
TimeAttendanceSA <[log in to unmask]>
Message-ID:
<[log in to unmask]>
Subject:
Antigen found =*.com file
Date: Mon, 28 Jan 2002 08:40:34
-0500
MIME-Version: 1.0
X-Mailer: Internet Mail Service
(5.5.2653.19)
Content-Type:
multipart/alternative;
boundary="----_=_NextPart_001_01C1A801.5CBB0A80"
Content-Length:
1225
X-UID: 17009
Antigen for Exchange found
Unknown->www.myparty.yahoo.com matching =*.com file filter.
The file is currently Removed. The message, "new
photos from my party!", was
sent from SHAULIS,
CAROL and was discovered in IMC Queues\Inbound
located at Michigan State University/CSP/SHIRE.
======================================================================
Return-Path: <[log in to unmask]>
Received: from
hrnt2.hr.msu.edu (hrnt2.hr.msu.edu [35.8.31.211])
by kepler.pa.msu.edu
(8.10.2+Sun/8.10.2) with ESMTP id g0SDi0P02729;
Mon, 28 Jan 2002 08:44:00
-0500 (EST)
Received: by hrnt2.hr.msu.edu with Internet Mail Service
(5.5.2653.19)
id <DSQQFCJ0>; Mon, 28 Jan 2002 08:44:53 -0500
Received: from BIGHORN.rad.msu.edu (rad-159-35.rad.msu.edu [35.8.159.35])
by hrnt2.hr.msu.edu with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.2653.13)
id DSQQFCJ1; Mon, 28 Jan 2002 08:44:37 -0500
Received: from mail pickup service by BIGHORN.rad.msu.edu with Microsoft
SMTPSVC;
Mon, 28 Jan 2002 08:43:45 -0500
From: [log in to unmask]
To: TimeAttendanceSA
<[log in to unmask]>
Subject: Antigen found =*.com file
Message-ID: <[log in to unmask]>
X-OriginalArrivalTime: 28 Jan 2002 13:43:45.0879 (UTC)
FILETIME=[CEAA5E70:01C1A801]
Date: 28 Jan 2002 08:43:45 -0500
Content-Length: 270
X-UID: 17010
Antigen for Exchange found
Unknown->www.myparty.yahoo.com matching
=*.com file filter.
The file is currently Removed. The message, "new
photos from my party!", was
sent from SHAULIS, CAROL and was discovered in
SMTP Messages\Inbound
located at
Unknown/Unknown/BIL.
