List of Received Virus-infected Emails

Here is a list of intercepted virus-containing emails that were addressed to me since the begining of this year. You can also access the archive for infected emails recieved in: 2002

Note that hackers are capable of faking sender addresses, so that the sender address entered below does not necessarily indicate the actual sender. Furthermore, virus-infected computers may send virus-containing emails without knowledge of the owner/user, so that even if the given sender address is correct, this usually does not mean willful dissipation of the virus by the owner of that sender address. 
          But, if you have received mail from the same sender address at approximately the same time, it is possible that your computer got infected by the same virus without you knowing it. If you actually discover your own sender address below, then it's really high time to have your computer checked for viruses! 
NOTE: All intercepted virus-infected emails were deleted before I could open and read them! If you recognize one of the emails below as being yours and containing some message you wanted me to read, e.g. without being aware of virus infection, please be informed that I couldn't have read the message. Please send it again, but after disinfecting your computer of course, because if the email again contains the virus, it will be deleted unread automatically. 
See links to sources of information and antidotes below. 

Day Mon Year GM-Time    Alleged sender address                     Virus code name
  7 Aug 2003 16:31:50   <manipulated address>                      W32/Klez-H 
  7 Aug 2003 14:33:00   <totally botched up address>               W32/Bugbear-B 
  4 Aug 2003 21:12:38   <manipulated address>                      W32/Mimail-A
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 28 Jul 2003 09:34:58   <similarly botched up address>             W32/Bugbear-Dam 
 23 Jul 2003 00:11:09   <similarly botched up address>             W32/Hybris-B 
 22 Jul 2003 07:30:09   <totally botched up address>               W32/Bugbear-Dam 
 22 Jul 2003 07:10:39   <similarly botched up address>             W32/Yaha-P 
 19 Jul 2003 05:42:52   <similarly botched up address>             W32/Yaha-P 
 19 Jul 2003 00:13:26   <same botched up address>                  W32/Yaha-P 
 18 Jul 2003 23:51:26   <similarly botched up address>             W32/Yaha-P 
 17 Jul 2003 09:32:36   <same botched up address>                  W32/Yaha-P 
 17 Jul 2003 07:31:02   <same botched up address>                  W32/Yaha-P 
 17 Jul 2003 07:03:55   <same botched up address>                  W32/Yaha-P 
 17 Jul 2003 06:46:29   <similarly botched up address>             W32/Yaha-P 
 16 Jul 2003 10:13:04   <same botched up address>                  W32/Yaha-P 
 16 Jul 2003 09:31:11   <same botched up address>                  W32/Yaha-P 
 16 Jul 2003 08:07:34   <same botched up address>                  W32/Yaha-P 
 16 Jul 2003 07:16:37   <same botched up address>                  W32/Yaha-P 
 16 Jul 2003 05:58:58   <similarly botched up address>             W32/Yaha-P 
 15 Jul 2003 08:14:53   <similarly botched up address>             W32/Yaha-P 
 15 Jul 2003 07:02:44   <similarly botched up address>             W32/Yaha-P 
 15 Jul 2003 06:46:56   <similarly botched up address>             W32/Yaha-P 
 12 Jul 2003 02:59:45   <similarly botched up address>             W32/Yaha-P 
 11 Jul 2003 10:18:13   <similarly botched up address>             W32/Sobig-E 
 10 Jul 2003 12:34:15   <similarly botched up address>             W32/Klez-H 
 10 Jul 2003 03:09:43   <similarly botched up address>             W32/Hybris-B 
  9 Jul 2003 13:31:07   <similarly botched up address>             W32/Yaha-P 
  9 Jul 2003 09:49:54   <similarly botched up address>             W32/Sobig-E 
  9 Jul 2003 09:45:59   <similarly botched up address>             W32/Yaha-P 
  9 Jul 2003 05:50:50   <similarly botched up address>             W32/Hybris-B 
  8 Jul 2003 17:28:32   <similarly botched up address>             W32/Sobig-E 
  8 Jul 2003 06:32:12   <similarly botched up address>             W32/Yaha-P 
  7 Jul 2003 09:31:03   <similarly botched up address>             W32/Yaha-P 
  6 Jul 2003 07:49:17   <messily botched up address>               W32/Yaha-P 
  5 Jul 2003 07:39:44   <totally botched up address>               W32/Sobig-E 
  4 Jul 2003 13:44:22   <similarly botched up address>             W32/Yaha-P 
  4 Jul 2003 09:18:30   <similarly botched up address>             W32/Sobig-E 
  3 Jul 2003 05:44:21   <similarly botched up address>             W32/Yaha-P 
  2 Jul 2003 12:59:40   <similarly botched up address>             W32/Sobig-E 
  2 Jul 2003 09:41:28   <similarly botched up address>             W32/Sobig-E 
  2 Jul 2003 07:43:58   <similarly botched up address>             W32/Yaha-P 
  1 Jul 2003 06:32:12   <messily botched up address>               W32/Yaha-P 
  1 Jul 2003 03:36:44   <totally botched up address>               W32/Sobig-E
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 30 Jun 2003 19:05:20   <similarly botched up address>             W32/Sobig-E 
 30 Jun 2003 19:01:01   <similarly botched up address>             W32/Sobig-E 
 30 Jun 2003 14:07:31   <similarly botched up address>             W32/Sobig-E 
 30 Jun 2003 12:16:41   <similarly botched up address>             W32/Klez-H 
 30 Jun 2003 09:18:00   <similarly botched up address>             W32/Yaha-P 
 30 Jun 2003 09:14:31   <messily manipulated address>              W32/Sobig-E 
 28 Jun 2003 13:41:50   mfinkbeiner@mindspring.com                 W32/Klez-H 
 27 Jun 2003 23:47:35   <manipulated address>                      W32/Sobig-E 
 27 Jun 2003 22:48:09   <manipulated address>                      W32/Sobig-E 
 27 Jun 2003 22:47:30   <manipulated address>                      W32/Sobig-E 
 27 Jun 2003 22:46:44   <manipulated address>                      W32/Sobig-E 
 27 Jun 2003 13:50:43   <messily manipulated address>              W32/Sobig-E 
 26 Jun 2003 14:36:00   <manipulated address>                      W32/Sobig-E 
 26 Jun 2003 14:07:18   <manipulated address>                      W32/Sobig-E 
 26 Jun 2003 14:06:16   <manipulated address>                      W32/Sobig-E 
 26 Jun 2003 13:51:16   webmaster@djibnet.com                      W32/Klez-H 
 26 Jun 2003 04:08:45   <manipulated address>                      W32/Sobig-E 
 24 Jun 2003 09:49:35   ongul@tm.net.my                            W32/Yaha-P 
 24 Jun 2003 07:26:07   ongul@tm.net.my                            W32/Yaha-P 
 24 Jun 2003 06:39:52   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 08:41:43   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 08:40:33   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 07:41:35   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 07:06:45   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 06:11:34   ongul@tm.net.my                            W32/Yaha-P 
 23 Jun 2003 05:33:57   ongul@tm.net.my                            W32/Yaha-P 
 21 Jun 2003 13:41:29   ongul@tm.net.my                            W32/Yaha-P 
 21 Jun 2003 00:30:38   ongul@tm.net.my                            W32/Yaha-P 
 20 Jun 2003 04:59:07   ongul@tm.net.my                            W32/Yaha-P 
 19 Jun 2003 06:37:02   ongul@tm.net.my                            W32/Yaha-P 
 18 Jun 2003 06:54:06   ongul@tm.net.my                            W32/Yaha-P 
 18 Jun 2003 05:59:40   ongul@tm.net.my                            W32/Yaha-P 
 17 Jun 2003 20:17:06   <messily manipulated address>              W32/Klez-H 
 17 Jun 2003 09:09:47   sami.nyyssonen@fulfillmentcenter123.com    W32/Bugbear-B 
 16 Jun 2003 05:42:12   Borut.Telban@unet.univie.ac.at             W32/Bugbear-B 
 14 Jun 2003 01:48:16   ongul@tm.net.my                            W32/Yaha-P 
 14 Jun 2003 01:25:40   ongul@tm.net.my                            W32/Yaha-P 
 14 Jun 2003 01:17:53   ongul@tm.net.my                            W32/Yaha-P 
 14 Jun 2003 00:36:32   ongul@tm.net.my                            W32/Yaha-P 
 14 Jun 2003 00:28:37   ongul@tm.net.my                            W32/Yaha-P 
 13 Jun 2003 23:37:12   ongul@tm.net.my                            W32/Yaha-P 
 13 Jun 2003 08:21:39   ongul@tm.net.my                            W32/Yaha-P 
 13 Jun 2003 07:53:59   ongul@tm.net.my                            W32/Yaha-P 
 12 Jun 2003 10:28:09   ongul@tm.net.my                            W32/Yaha-P 
 12 Jun 2003 10:10:46   ongul@tm.net.my                            W32/Yaha-P 
 12 Jun 2003 09:51:40   ongul@tm.net.my                            W32/Yaha-P 
 12 Jun 2003 08:10:54   ongul@tm.net.my                            W32/Yaha-P 
 12 Jun 2003 07:56:47   ongul@tm.net.my                            W32/Yaha-P 
 11 Jun 2003 07:27:37   ongul@tm.net.my                            W32/Yaha-P 
 11 Jun 2003 06:58:10   ongul@tm.net.my                            W32/Yaha-P 
 11 Jun 2003 06:15:51   ongul@tm.net.my                            W32/Yaha-P 
 11 Jun 2003 05:54:03   ongul@tm.net.my                            W32/Yaha-P 
 10 Jun 2003 09:28:56   ongul@tm.net.my                            W32/Yaha-P 
 10 Jun 2003 08:16:45   ongul@tm.net.my                            W32/Yaha-P 
 10 Jun 2003 08:10:05   ongul@tm.net.my                            W32/Yaha-P 
 10 Jun 2003 07:49:34   ongul@tm.net.my                            W32/Yaha-P 
 10 Jun 2003 05:13:45   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 11:27:53   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 09:47:37   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 09:34:49   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 08:51:23   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 08:47:50   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 08:20:43   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 06:49:37   ongul@tm.net.my                            W32/Yaha-P 
  9 Jun 2003 06:01:20   ongul@tm.net.my                            W32/Yaha-P 
  8 Jun 2003 12:06:19   ongul@tm.net.my                            W32/Yaha-P 
  8 Jun 2003 11:50:10   ongul@tm.net.my                            W32/Yaha-P 
  8 Jun 2003 04:40:26   <manipulated address>                      W32/Sobig-C 
  8 Jun 2003 04:40:21   <manipulated address>                      W32/Sobig-C 
  7 Jun 2003 08:15:58   ongul@tm.net.my                            W32/Yaha-P 
  7 Jun 2003 01:47:53   ongul@tm.net.my                            W32/Yaha-P 
  6 Jun 2003 21:04:31   c58w91euu@yahoo.com                        Dial/PecDial-B 
  6 Jun 2003 08:24:50   mcdonald@span.ch                           W32/Bugbear-B 
  6 Jun 2003 07:47:01   ongul@tm.net.my                            W32/Yaha-P 
  6 Jun 2003 07:22:11   ongul@tm.net.my                            W32/Yaha-P 
  5 Jun 2003 13:25:34   ongul@tm.net.my                            W32/Yaha-P 
  5 Jun 2003 08:15:30   <manipulated address>                      W32/Sobig-C 
  3 Jun 2003 22:40:58   ongul@tm.net.my                            W32/Yaha-P 
  3 Jun 2003 10:27:59   <manipulated address>                      W32/Sobig-C 
  3 Jun 2003 06:42:43   ongul@tm.net.my                            W32/Yaha-P 
  3 Jun 2003 06:16:28   ongul@tm.net.my                            W32/Yaha-P 
  3 Jun 2003 02:46:33   ongul@tm.net.my                            W32/Yaha-P 
  2 Jun 2003 16:28:39   <manipulated address>                      W32/Sobig-C 
  2 Jun 2003 12:37:52   ongul@tm.net.my                            W32/Yaha-P 
  2 Jun 2003 08:18:20   ongul@tm.net.my                            W32/Yaha-P 
  2 Jun 2003 01:12:43   ongul@tm.net.my                            W32/Yaha-P 
  1 Jun 2003 06:25:35   ongul@tm.net.my                            W32/Yaha-P 
  1 Jun 2003 04:27:23   ongul@tm.net.my                            W32/Yaha-P
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 31 May 2003 02:28:11   <manipulated address>                      Troj/Peido-B 
 27 May 2003 14:35:54   support@microsoft.com              damaged W32/Palyh-A 
 26 May 2003 09:12:25   support@microsoft.com                      W32/Palyh-A 
 24 May 2003 18:07:45   support@microsoft.com                      W32/Palyh-A 
 24 May 2003 11:15:27   support@microsoft.com                      W32/Palyh-A 
 22 May 2003 08:46:26   support@microsoft.com              damaged W32/Palyh-A 
 22 May 2003 05:10:56   support@microsoft.com                      W32/Palyh-A 
 21 May 2003 17:01:38   support@microsoft.com                      W32/Palyh-A 
 21 May 2003 07:12:34   support@microsoft.com                      W32/Palyh-A 
 20 May 2003 16:27:37   support@microsoft.com              damaged W32/Palyh-A 
 20 May 2003 11:58:40   support@microsoft.com                      W32/Palyh-A 
 20 May 2003 06:48:11   support@microsoft.com                      W32/Palyh-A 
 16 May 2003 02:43:33   naveen@activeindia.com                     W32/Klez-H 
  3 May 2003 07:28:49   tmfacssrsi@pacific.net.ph                  W32/Klez-H
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 21 Apr 2003 02:45:22   y-w@xinhuanet.com                          W32/Klez-H 
 18 Apr 2003 12:33:43   francesw@vianet.net.au                     W32/Bugbear-A 
 16 Apr 2003 03:35:52   <manipulated> [64.209.62.150]              W32/Hybris-B
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 29 Mar 2003 15:55:13   <mail.1800wineshop.com [202.207.156.6]>    <damaged> 
 28 Mar 2003 12:51:14   owner-esfo-l@SEGATE.SUNET.SE               W32/Klez-H 
 28 Mar 2003 06:16:32   owner-esfo-l@SEGATE.SUNET.SE               W32/Klez-H 
 25 Mar 2003 15:34:06   owner-esfo-l@SEGATE.SUNET.SE               W32/Klez-H 
 24 Mar 2003 02:47:30   mgauden@nat.vu.nl                          W32/Klez-H 
 23 Mar 2003 11:16:48   <manipulated address>                      W32/Sobig-A 
 20 Mar 2003 08:40:54   <garbled address>                          VBS/Redlof-A 
 20 Mar 2003 07:51:34   <manipulated address>                      W32/Sobig-A 
 14 Mar 2003 06:22:29   sales@trubus-online.com                    W32/Magistr-B 
 12 Mar 2003 08:30:47   radkns@earthlink.net                       W32/Klez-H 
 11 Mar 2003 07:29:07   <manipulated address>          invalidated W32/Sobig-A 
 11 Mar 2003 03:05:57   RBonneropc@kc.rr.com                       W32/Klez-H 
 11 Mar 2003 01:49:09   RBonneropc@kc.rr.com                       W32/Klez-H 
 10 Mar 2003 07:39:22   RBonneropc@kc.rr.com                       W32/Klez-H 
 10 Mar 2003 00:52:26   RBonneropc@kc.rr.com                       W32/Klez-H 
  9 Mar 2003 17:39:26   RBonneropc@kc.rr.com                       W32/Klez-H 
  7 Mar 2003 00:04:17   RBonneropc@kc.rr.com                       W32/Klez-H 
  6 Mar 2003 14:52:12   RBonneropc@kc.rr.com                       W32/Klez-H 
  5 Mar 2003 20:01:08   RBonneropc@kc.rr.com                       W32/Klez-H 
  5 Mar 2003 14:21:42   RBonneropc@kc.rr.com                       W32/Klez-H 
  5 Mar 2003 06:30:50   RBonneropc@kc.rr.com                       W32/Klez-H 
  4 Mar 2003 19:13:59   mfinkbeiner@mindspring.com                 W32/Klez-H 
  4 Mar 2003 02:54:44   RBonneropc@kc.rr.com                       W32/Klez-H 
  3 Mar 2003 06:45:53   RBonneropc@kc.rr.com                       W32/Klez-H 
  2 Mar 2003 21:43:46   RBonneropc@kc.rr.com                       W32/Klez-H 
  2 Mar 2003 18:58:50   RBonneropc@kc.rr.com                       W32/Klez-H
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 27 Feb 2003 08:36:22   <manipulated address>                      W32/Avril-A 
 25 Feb 2003 00:37:32   ieruatm@indo.net.id                        W32/Magistr-B 
 22 Feb 2003 14:45:54   <empty address>                            W32/Hybris-C 
 11 Feb 2003 15:16:22   pterhune@gte.net                           W32/Klez-H
Day Mon Year GM-Time    Alleged sender address                     Virus code name
 29 Jan 2003 18:04:18   karamint@gjr.paknet.com.pk                 W95/CIH-10xx 
 26 Jan 2003 17:41:22   karamint@gjr.paknet.com.pk                 W95/CIH-10xx 
 23 Jan 2003 18:28:54   karamint@gjr.paknet.com.pk                 W95/CIH-10xx 
 20 Jan 2003 22:47:14   gsw4@adelphia.net                          W32/Klez-H 
 20 Jan 2003 18:01:29   gsw4@adelphia.net                          W32/Klez-H 
 17 Jan 2003 21:21:47   gsw4@adelphia.net                          W32/Klez-H 
 17 Jan 2003 05:35:45   MAILER-DAEMON@fhi-berlin.mpg.de            W32/Yaha-E 
 14 Jan 2003 15:29:49   informace@indoneske-velvyslanectvi.cz      W32/Avril-A 
 14 Jan 2003 15:29:24   informace@indoneske-velvyslanectvi.cz      W32/Avril-A 
 14 Jan 2003 11:57:33   informace@indoneske-velvyslanectvi.cz      W32/Avril-A 
 14 Jan 2003 07:52:08   informace@indoneske-velvyslanectvi.cz      W32/Avril-A 
 14 Jan 2003 07:51:47   informace@indoneske-velvyslanectvi.cz      W32/Avril-A 
 14 Jan 2003 00:57:28   <empty address>                            W32/Klez-H 
 13 Jan 2003 19:45:14   boards@parentsplace.com                    W32/Klez-H 
 12 Jan 2003 22:28:39   MAILER-DAEMON@fhi-berlin.mpg.de            W32/Yaha-E 
 12 Jan 2003 07:35:49   <manipulated address>                      W32/Sobig-A 
 12 Jan 2003 07:32:44   <manipulated address>                      W32/Sobig-A 
 12 Jan 2003 07:08:46   <manipulated address>                      W32/Sobig-A 
 11 Jan 2003 15:26:29   DOsborne@ahslink.com                       W32/Yaha-E 
 11 Jan 2003 04:29:05   <manipulated address>                      W32/Sobig-A 
 10 Jan 2003 22:49:50   bt.grahmbeek@quicknet.nl                   W32/Yaha-E 
 10 Jan 2003 14:38:55   austronesian@online.no                     W32/Bugbear-A 
  8 Jan 2003 03:51:08   MAILER-DAEMON@fhi-berlin.mpg.de            W32/Yaha-E 
  7 Jan 2003 07:32:13   el_meeks@bellsouth.net                     W32/Yaha-E 
  3 Jan 2003 07:59:56   bt.grahmbeek@quicknet.nl                   W32/Yaha-E 
  2 Jan 2003 16:51:56   admin.elsham@jayapura.wasantara.net.id     W32/Klez-H
Infected emails intercepted earlier are in the archive for 2002
The following table contains links to sources providing information on the viruses, or offering corresponding anti-virus programs. We are not responsible for quality or dependability of the products offered at the linked sites. This is a random, not complete listing. Not-inclusion of a supplier below does not imply inferiority of either its products, competence, or service.

  Virus  Information & antivirus programs 
Dial/PecDial-B                       Sophos, also†    
Joke/HHold                       Sophos, also†    
Troj/Peido-B = VBS/Inor.B         F-Secure             Sophos, also†   TrendMicro
W32/Apology-B  AntiVir*       F-Secure   IPA ºº Kaspersky, also‡   Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Avril-A  AntiVir*       F-Secure             Sophos, also† Symantec TrendMicro
W32/Badtrans-B  AntiVir* BitDefender   DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡ McAfee Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Braid-A  AntiVir* BitDefender     F-Secure Hacksoft** IPA ºº     Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Bugbear-A  AntiVir* BitDefender Cnet º DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡ McAfee Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Flcss          F-Secure     Kaspersky, also‡ McAfee Norman   Sophos, also† Symantec TrendMicro
W32/Gibe-A    BitDefender     F-Secure     Kaspersky, also‡   Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Hybris-C  AntiVir*       F-Secure Hacksoft** IPA ºº     Norman   Sophos, also† Symantec TrendMicro
W32/Klez-G/-H  AntiVir* BitDefender   DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡ McAfee Norman   Sophos, also† Symantec TrendMicro
W32/Magistr-B  AntiVir* BitDefender   DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡ McAfee Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/MyParty-A  AntiVir* BitDefender   DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡ McAfee Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Palyh-A  AntiVir*       F-Secure Hacksoft** IPA ºº Kaspersky, also‡   Norman   Sophos, also† Symantec TrendMicro
W32/Sircam-A  AntiVir* BitDefender   DialogNk‡ F-Secure Hacksoft** IPA ºº Kaspersky, also‡   Norman Prot.Data Sophos, also† Symantec TrendMicro
W32/Sobig-A  AntiVir*       F-Secure Hacksoft**       Norman   Sophos, also† Symantec TrendMicro
W32/Yaha-E = W32/Lentin.F  AntiVir* BitDefender     F-Secure Hacksoft**   Kaspersky, also‡   Norman   Sophos, also† Symantec TrendMicro
W32/Yaha-P = W32/Lentin.M  AntiVir*       F-Secure             Sophos, also† Symantec TrendMicro
W95/CIH-xxx  AntiVir* BitDefender     F-Secure Hacksoft**   Kaspersky, also‡   Norman   Sophos, also†   TrendMicro
                                     *   auf Deutsch                       †   en français                       º  
   ** en español                       ‡   o pycc                       ºº 

Url: http://w3.rz-berlin.mpg.de/~wm/wm-virex.html
Mounted: April 27, 2002

Return to Top  |  Return to Home  |  Return to Virus site