First you need to remove the preview screen from your Outlook Express Window. After that has been done you can safely view an email to see if might have a virus.
These are some of the reasons that you might want to view an email this way.
- If you see that there is an attachment [usually a paper clip symbol], and you do not recognize the sender.
- If you see that there is an attachment and you know the sender.
We did some marketing and got an email in reply to what we sent out and it had a virus in it.
It had all the good signs: a familiar subject line, an email address we recognized, but it also had an attachment that we thought a little suspicious, considering the email that we sent.
Here is what you do to view the email and its contents saftely.
- First, highlight the email in question. Do not "Double Click", the email will open.
- Usually you would "Left Click" once and it will highlight the email.
- Then, "Right Click" in the highlighted area and the menu below will appear.
- Then, "Left Click" on the properties bar.
After you click the "Message Source" button, another window will appear and this is the one that you need to read.
"Double Click", in the top bar and the window will maximize.
Now you will see at the top the "Email Header". Go down to where you start to see the words of the email. this is where you want to look.
You can open the email if you see these things. Below, in the place that says, you can read the message written to you.
- If you see a message that you understand and sounds familiar.
Do not open it if there is not a message between the header and the attachment.
- This is the Modus Operandi of the virus
This is the header of the email.
Return-Path: <........@.........com>
Received: from .................com (.................com [000.000.000.000])
by xxx.atlh.tttttt.com (8.55.6/8.22) with ESMTP id sdfrtaesZ029633
for <........@.........com>; Wed, 9 Jan 2002 11:34:36 -0500
Received: from ........@..........net (........@.........com [000.000.000.000])
by ........@.........com (4.1/4.1) with ESMTP id sdjiklXur27297
for <........@.........com>; Wed, 9 Jan 2002 10:33:56 -0500 (EST)
Received: from ..........net ...............net [000.000.000.00])
by ............net (8.00.3/4.4) with ESMTP id ffrXuY08839
for <........@.........com>; Wed, 9 Jan 2002 10:33:56 -0500 (EST)
Received: from .............com (...............net) by ............net
(LSMTP for Windows NT v1.1b) with SMTP id <18.00001125@.............net>;
Wed, 9 Jan 2002 10:29:19 -0500
Message-ID: <8175200213915291931@.................com>
X-EM-Version: 5, 0, 0, 4
X-EM-Registration: #002763442401B00C100
Reply-To: ........@.........com
From: "Auto Mail"
To: ........@.........com
Subject: .............. You Have Important Information From Sallie Mae
Date: Wed, 9 Jan 2002 10:29:19 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_01BC2B74.89D1CCC0"
X-UIDL: o%\!!aB?"!(JV"!`%\!!
This is a multi-part message in MIME format.
------=_NextPart_000_01BC2B74.89D1CCC0
Content-type: text/plain; charset=US-ASCII
This is where you would be able to read the message written to you.
------=_NextPart_000_01BC2B74.89D1CCC0
Content-Type: application/pdf; name="20020109100238I0000756.PDF"
Content-Transfer-Encoding: base64
Content-Description: 20020109100238I0000756.PDF
Content-Disposition: attachment; filename="20020109100238I0000756.PDF"
Below is what the code looks like for an attachment. A virus looks like this also.
JVBERi0xLjMNJeLjz9MNCjEgMCBvYmoNWyANL1BERiAvVGV4dCAvSW1hZ2VCIA1dDWVuZG9iag0y
IDAgb2JqDTw8IA0vVHlwZSAvQ2F0YWxvZyANL1BhZ2VzIDE4IDAgUiANPj4gDWVuZG9iag0zIDAg
b2JqDTw8IA0vVHlwZSAvUGFnZSANL01lZGlhQm94IFsgMCAwIDYxMiA3OTIgXSANL1BhcmVudCAx
OCAwIFIgDS9SZXNvdXJjZXMgPDwgL0ZvbnQgPDwgL0YxIDEyIDAgUiAvRjIgMTMgMCBSIC9GNCAx
