Search results

Mike, I'm thinking it's the 2nd scenario in my last post that is occurring. Another thing that occurred to me is if person B's machine is infected, and Klez is emailing itself out through the Notes SMTP server, since Klez uses From addresses other than the actual senders, Person B will never...

You're not sending the virus out, you're receiving it. Or you would be, if the sender didn't have Scanmail protection on their mail server. Anyway, if you right-click on one of the messages and select Properties, you should be able to view the SMTP headers. One of these would be Return-Path...

The fact that you're getting .pif files as attachments means it's a virus/worm, probably Klez. It's probably someone in an organization who uses Scanmail for Lotus Notes, which is removing/blocking the attachment and then sending you that message. What are you using for an email client? You...

What email client are you using? If you can view the headers in the message, look for a Return-Path, X-Apparently-From, or SMTPOriginator header and see if they're all coming from the same address. If it's Klez then this header should reveal the sender's email address so you can notify them.

Are all the emails the same or are there variations (e.g. exe file names, subject lines, body text different in each one)? Do they appear to be coming from you or from someone else to you? It's probably someone else who has a virus and has your email address on their computer. If you can...