Solved

Is this virus related?

Posted on 2006-06-08
2
227 Views
Last Modified: 2010-04-08
Hi,
A client sent an e-mail to a distribution list recently. The email had several attachments. One of the recipients complained that the email had several attachments named "file000.txt" in addition to the original attachments. None of the other recipients expeienced this.

The complaining recipient (for lack of a better term) forwarded the email he received back to us. Sure enough, each of the 3 original attachments had a corresponding "file000.txt" attachment to go with it. I looked at these text files, and they appeared to be basically code for an html document, and they did contain text from the original corresponding attachment. And they had what looked like email header info and this:

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-Virus-Scanned: Symantec AntiVirus Scan Engine

 The originating PC is running up to date EZ Armour AV that scans e-mail. Additionally, I ran an online Trendmicro scan and all it found was 35 cookies, no viruses.

What happened here? I am confident we are virus free, and that the original email went out with only the 3 legitimate attachments, and that only the 1 of 5 recipients received these unknown attachments. Because of the municipal gov't setting we are in, a knowledgeable explanation would be beneficial.

Thanks,
Bill
0
Comment
Question by:westone
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 14

Accepted Solution

by:
ECNSSMT earned 500 total points
ID: 16870956
no worries, recipient should have also recieved a winmail.dat file also.    These are not virus related.

I will have to get the exact info, but i think this recipient is probably not using a Outlook client and/or is not residing on an MS Exchange server.  I believe that the info contained in the file000.txt files are purely for MS and when it goes to a non MS mail app the support information gets represented as that.

Regards
0
 
LVL 8

Expert Comment

by:hiteshgupta1
ID: 16883336
yeah
it's not related to virus
generally the file contains Header details for Non MS exchange server
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
This article will help to fix the below errors for MS Exchange Server 2013 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question