is it a virus?

Hello,
That’s what I received in Outlook, a mail from me to me (the points mean my e mail):

Return-Path: …
Received: from IMFPRODMNGR.org (202.7.83.254) by mail.libertysurf.net (7.1.026)
id 446C7DA001109FAA for …; Tue, 6 Jun 2006 04:06:23 +0200
Date: Tue, 06 Jun 2006 12:07:41 +1000
To: "…
From: …
Subject: 1545453
Message-ID: psbhodufuhqtmbojdpt@tiscali.fr
MIME-Version: 1.0
Content-Type: text/html; charset=“us-ascii”
Content-Transfer-Encoding: 7bit
X-Antivirus: avast! (VPS 0622-4, 02/06/2006), Inbound message
X-Antivirus-Status: Clean

What is this? Thank you for your help.

Hello,

Could you please send me the file via e-mail so I may inspect it?

e-mail: justin1278@iprime,info (please change the , before info into a . when sending)

Regards,

Justin

If you didn’t send it (the safest option is deletion), which I assume you didn’t then this is a common trick usually used to avoid Spam filters as most white list the users email address allowing it through.

avast has scanned it as you can see from the headers and didn’t find anything, which isn’t a 100% guarantee.

Either your email address has made it on to a spam listing or someone you know who has your email address in their address book is infected with some form of spambot trojan. Email from addresses are very easy to fake as are the Reply To (Return Path), this is usually selected at random from the infected systems address book, recipients are also selected from the address book and a number of other locations on the infected system.

Hi,

I have e-mailed you back with the results. What seems the stragest to me is that the file is from you it appeared as if you sent an e-mail to yourself but I would not assume you did this otherwise you most likely would not have come here.

Regards,

Justin

Just wanted to say that I got this at my workplace (I use avast at home) on my company account … and it too looked like I sent it to myself. I’ve done some poking around and everyone at work did not get it, but about 1/2 of us did. Several posters on some web forums also claim they got it. Most got it on 6/6/06 or on the 5th (time zone difference?).

Hi,

Please send me the file that was attached as well.

E-mail: justin1278@iprime,info (notice the , before info please change that to a .)

Thanks,

Justin

Justin, why are you saying to send it to your email address?
I think the user should send to virus @ avast.com, otherwise, the virus database won’t be updated, the user won’t be protected, we won’t improve detection…

The answer is here, Tech: http://forums.comodo.com/index.php/topic,377.0.html

[b]"Hi,

We all know Comodo doesn’t have good detection, I am constantly sending in new virus samples, I actaully “hunt” down malware and send it to them which is always added. We are here to help, Melih has a complete team working on the Antivirus, and I am sending in at least 1 new sample each day! Since I started I have currently sent in 8 and am already working on Virus # 9 which will be ready soon. Oh, I have acquired a virus that most antivirus programs don’t even detect! major antivirus products such as Symantec, avast!, etrust, dr. Web, and many more don’t even detect this new virus threat, but Comodo does because people like me hunt down the new malware threats and send them in, although it may be 27% now don’t expect it to be that low anymore, each day with our help Comodo gets better and better detection. Our goal is to get Comodo’s detection unmatched!!!
Regards,

Justin"[/b]

@Justin

As I posted in your Goodbye thread I do appreciate that you decided to submit the unknown sample to avast!. But please don’t deter other users from submitting their samples to avast!. I’m sure this isn’t your intent.

:slight_smile: Hi all :

  Perhaps Justin is getting some of his "samples" that he submits to
  Comodo  by requesting Avast Users email their file(s)
  to him !?

This, for me, does not answer my question properly… this is avast forums after all, we’re giving help, we’re pleased when WE receive better protection from Alwil… Am I wrong?

No, not wrong at all.

My answer was just that. An answer to a question. Not a justification of the behavior.

Ok. Now I got your mind 8)