Dodgy email

**wonkyfox** · 7th September 2002

can anyone tell me what this is????
is it a virus cause my virus softeware is upto date but has not picked it up
and i did not send this email and don`t know any off the people it sent it itself to?
any help would be great!
cheers
aL

This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

tims@hazlemsfinancial.com
This message has been rejected because it has
an apparently executable attachment snoopy.exe
This is a virus prevention measure.
If you meant to send this file then please
package it up as a zip file and resend it.

------ This is a copy of the message, including all the headers. ------
------ The body of the message is 125699 characters long; only the first
------ 65536 or so are included here.

Return-path: <wonkyfox@******.***>
Received: from modem-201.blue-streak-damsel.dialup.pol.co.uk ([62.***.***.***] helo=Wyvpghkz)
by mail18.svr.pol.co.uk with smtp (Exim 3.35 #1)
id 17ndr4-0001ER-00
for tims@hazlemsfinancial.com; Sat, 07 Sep 2002 12:34:23 +0100
Wrom: EMSFDULHPQQWOYIYZUNNYCGPKYLEJGD
To: tims@hazlemsfinancial.com
Subject: A very excite game
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=VM5v44fYf0bqp9AYQ4
Message-Id: <E17ndr4-0001ER-00.2002-09-07-12-34-23@mail18.svr.pol.co.uk>
Date: Sat, 07 Sep 2002 12:34:23 +0100

--VM5v44fYf0bqp9AYQ4
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>

Hello,This is a very excite game 
This game is my first work. 
You're the first player. 
I wish you would like it.</BODY></HTML>

--VM5v44fYf0bqp9AYQ4
Content-Type: application/octet-stream;
name=snoopy.exe
Content-Transfer-Encoding: base64
Content-ID: <HA76W79T1h8O4>

**EUPHORiA** · 7th September 2002

its hard to tell just by looking at it, how large was the email?

**wonkyfox** · 7th September 2002

i can send you a copy of the returned email i received,would that help?
i`ve also received more of these messages returned from other email addys of which i have no idea who they are..

they are headed :"Mail delivery failed, returning message to sender",
but i did not send them??

**tef89** · 7th September 2002

I am 99% certain it's a virus wonky - the wording is extremely similiar to some of the klez virus attachments - I'm having a look now to try and find some more information

EDIT: Yes it's the klez virus 100% sure

tef

**tef89** · 7th September 2002

Read the info here:-

http://www.europe.f-secure.com/v-descs/klez_e.shtml

tef

**EUPHORiA** · 7th September 2002

tef89 u use F Secure? its on excellent virus program btw

**tef89** · 7th September 2002

Used F-secure Corporate for about a year - it's the best I've found so far. XP loves it and I personally can't notice any slow-down whatsoever - couldn't be happer with it

It's caught everything I've ever thrown at it. I also use Mailwasher to allow me to check emails while they are still on the mail server letting me bounce spam and potential Virus attachments.

This is a serial I found - No idea what it's for:-

s/n: ELL0 - XVKP - YY4P - LEPP - JB3X

tef