Return mail from qmail, yahoo, and others

[skymax]

Hello,

Hoping someone can shed insight onto this problem I am having with my mail. Starting the first of this week, I started getting numerous e-mails stating they could not be delivered. They are from multiple mail services to dead-end e-mail accounts.

Have Virus Protection on my server (GroupShield) and Mcafee Virusscan on my desktop. They are catching a number of these messages containing the Swen virus. As far as I can tell, my systems are protected.

I also have a product monitoring incoming and outgoing e-mail. It shows these messages are coming from the outside from addresses like: memnpep@rcn.com, asakura1@po10.lcv.ne.jp, etc..

I think I have a pretty good idea and setup on this matter. Just wanting to check with the body atlarge to see what your thoughts and suggestions are on this matter.

Any insight to a blind man is welcomed.

Thanks

 

[gmcdonnell]

From what I've seen the Swen virus fakes NDRs as part of its distribution method. So the messages that you're getting that appear to be NDRs probably aren't - they're just the virus trying to spread itself. The email addresses that they're being sent to were probably culled from infected machines.

Gary McDonnell

http://turbogeeks.com

 

[skymax]

Thanks for the response. Couple of questions -

From your message that would mean the virus is still on my machine even though two anti-virus programs state I am clean?

Secondly, I have found repair programs for this virus. Specifically, stinger and rmswen which I have run to clean my system up. Are there others that I can try?