has detected the following in a mail addressed to you:......

[Papa Joe]

Hi
Another person received a message from their ISP telling them that
their virus scanner:
...."has detected the following in a mail addressed to you:

Worm/Bagle.AT worm

The mail was not delivered."

Then it continues to name the sender who is a customer of mine and who
promptly calls me and gets excited.

From what I have read, this /Bagle.AT worm email may not have even
come from the accused sender. Am I understanding it correctly?
Thanks
Joe

 

[David H. Lipman]

Yes.

Dave



| Hi
| Another person received a message from their ISP telling them that
| their virus scanner:
| ..."has detected the following in a mail addressed to you:
|
| Worm/Bagle.AT worm
|
| The mail was not delivered."
|
| Then it continues to name the sender who is a customer of mine and who
| promptly calls me and gets excited.
|
| From what I have read, this /Bagle.AT worm email may not have even
| come from the accused sender. Am I understanding it correctly?
| Thanks
| Joe
|
|
|
|
|
|

 

[Papa Joe]

Dave,
Thanks for the reinforcement.
Joe

Yes.

Dave



| Hi
| Another person received a message from their ISP telling them that
| their virus scanner:
| ..."has detected the following in a mail addressed to you:
|
| Worm/Bagle.AT worm
|
| The mail was not delivered."
|
| Then it continues to name the sender who is a customer of mine and who
| promptly calls me and gets excited.
|
| From what I have read, this /Bagle.AT worm email may not have even
| come from the accused sender. Am I understanding it correctly?
| Thanks
| Joe
|
|
|
|
|
|

 

[David H. Lipman]

Assuming, by the naming convention, the worm name is by Kaspersky...
The following is McAfee's write-up on the infector.

W32/Bagle.bb@mm -- http://vil.nai.com/vil/content/v_129509.htm

Dave



| Dave,
| Thanks for the reinforcement.
| Joe