×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

WB32.Magistr - Returned mail indicates virus - but not on my PC?

WB32.Magistr - Returned mail indicates virus - but not on my PC?

WB32.Magistr - Returned mail indicates virus - but not on my PC?

(OP)
I have been getting returned mail that I never sent that seemingly comes from my computer. The apparently from line lists my address, the x-sender lists My Dad's address.

I have run anti virus checks by Norton and McAfee and my machine comes up clean.

Could the Magistr virus have infected my Dad's machine, gotten my old WAB files (I was the only Outlook Express user on that machine) and sent the virus, the returns which are now being sent to me?

Clues:
x-sender = Dad
excerpts attached are all files that are only on that computer.
recipients do not include new contacts since I moved from Dad's house.

But how would this work?

Josh

RE: WB32.Magistr - Returned mail indicates virus - but not on my PC?

Could the Magistr virus have infected my Dad's machine, gotten my old WAB files (I was the only Outlook Express user on that machine) and sent the virus, the returns which are now being sent to me?

It's possible I suppose. If your email was the default box in LookOut OutLook Express the virus could be sending itself to your addresses using your Dad's PC. "Bounced" mail could be returned to that default email box which is then being picked up by you on your new PC. Did you change your email address or do something to forward you old email to you?

You should also be aware that there is a new variant of Magistr out but since you indicate that the addresses are on your old PC and not your new PC I would still think it's not on your current PC.

James P. Cottingham

I am the Unknown lead by the Unknowing.
I have done so much with so little
for so long that I am now qualified
to do anything with nothing.

RE: WB32.Magistr - Returned mail indicates virus - but not on my PC?

Dear Josh,

I too had returned mail indicating virus infection in late December. Recently realised that my NAV version4.0 ( Gold 95 ) needed an upgraded file for updating virus definitions. There were 2 viruses which I found: W32.Magistr.33921@mm and W32.HLLW.Bymer .

Besides downloading the required upgrade file, I also managed to follow the instructions on www.symantec.com on cleaning up my office machine.

Hope that helps, KC

RE: WB32.Magistr - Returned mail indicates virus - but not on my PC?

You need to be sure your Virus DAT Files are up to date.  You need to download the newest virus definitions.  The problem with Virus Software is that it must stay current and must know what it is looking for in order to find any traces of Virus. So be sure and check your virus definitions date.  One more thing some viruses like Magistra will not only take email addresses from your address book but will also scan your emails and take email addresses from any email message header.  So if your dad ever sent you a regular uninfected email and left a copy in his sent folder or you sent him an email and he still has a copy in his inbox or trash folder you two could have recieved infected emails.  Also if you are on a home network a virus can spread to you through shared folders!!

Acquisitive - 1. Characterized by a strong desire to gain and possess. 2. Tending to acquire and retain ideas or information :)

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close