[Gareth]

I am getting emails saying

Dear user of e-mail server "xx",

Your e-mail account will be disabled because of improper using in next three days, if you are still wishing to use it, please, resign your account information.

Please, read the attach for further details.

Attached file protected with the password for security reasons. Password is 42050.

Sincerely,

The xx team http://www.xxx.net

The attached file is a virus

The email header is

Return-path: <xx@xx>
Envelope-to: a4dablew@xx
Delivery-date: Thu, 15 Jul 2004 16:25:49 +0100
Received: from xx by xxx with local-bsmtp (Exim 4.34)
id 1Bl87I-0002MM-V7
for xx@xx; Thu, 15 Jul 2004 16:25:49 +0100
Received: from [68.162.183.18] (helo=dallas)
by xx with smtp (Exim 4.34)
id 1Bl87H-0002MG-8t
for Delly_Orsher@xx; Thu, 15 Jul 2004 16:25:48 +0100
Date: Thu, 15 Jul 2004 11:31:16 -0500
To: Delly_Orsher@xx
Subject: Email account utilization warning.
From: support@xx
Message-ID: <glsmqktycrvtfbkwohu@xx>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--------eeexlxiljwmobyxerkvk"
X-Spam-Level:
X-Spam-Status: No, hits=0.2 required=10.0 tests=BAYES_44,NO_REAL_NAME
autolearn=no version=2.63
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on xx

I have had five in the last hour, how can I find the sender info? I'm concerned that one of my clients could receive one

[XILO]

Hi,

We get a few of these - they are a virus from an infected PC - unforunately there is not much you can do regarding this.

You need to contact and them them know - hopefully they can contact their customer.

Name: pool-68-162-183-18.pitt.east.verizon.net
Address: 68.162.183.18

Regards

Tom

[Gareth]

Thanks done that

Was just a bit concerned that if one of my clients got one of these, they might think it was from me and open the attachment.

[XILO]

Might be worth sending your customers an email advising them of such.

Matt