Jump to content


Photo

Worm.SomeFool.Gen-1 = Real or Not?


  • This topic is locked This topic is locked
2 replies to this topic

#1 TomKel

TomKel

    Member

  • New Member
  • Pip
  • 1 posts

Posted 19 July 2004 - 01:24 PM

I received a mail stating that "barracuda.provident.com (Spam Firewall)" had found a Worm supposedly in a mail I sent out.
"VIRUS ALERT
The Spam Firewall found
virus: Worm.SomeFool.Gen-1
banned name: document.pif
in your email to the following recipient: "
Note that the recipient address is not one that I ever sent mail to.
Is this a real warning?
Do I possibly have a Worm called "SomeFool.Gen-"?
Is this mail itself just a Spam/Hoax mail?

#2 Master Green

Master Green

    Member

  • Full Member
  • Pip
  • 41 posts

Posted 19 July 2004 - 02:00 PM

Hi,
It is beleived to be related to the Netsky Virus, and reported to be a mass mailing worm. You can go into the registry to remove it or run a virus scan. Or you can go to www.symantec.com and look up Netsky and use their tool or instructions to remove it...Keep us posted...

#3 Trilobite

Trilobite

    Malware Hunter

  • Trusted Advisor
  • PipPipPipPipPip
  • 711 posts

Posted 19 July 2004 - 03:11 PM

No, it is not a real warning. It looks like it is a bounced e-mail from a spoofed address or a worm attempting to propagate.
It does not necessarily mean that you sent the virus or that you are infected.
However, the email that you have recieved could very well carry a virus with it.

Instead of blindly editing your registry attempting to remove a worm that you may or may not have, I would suggest that you run a full system scan with an updated virus scanner.

Edited by Trilobite, 19 July 2004 - 03:19 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

Member of ASAP and UNITE
Support SpywareInfo Forum - click the button