Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users! is a Worm

Discussion in 'General Discussion' started by Website Rob, May 23, 2003.

  1. Website Rob

    Website Rob Well-Known Member

    Mar 23, 2002
    Likes Received:
    Trophy Points:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    For those (like myself) that have been wondering about the returned eMails or the ones sitting in the Mail queue with that return address, I have found out it is the result of a new Worm.

    Alias: I-Worm.Palyh (Kaspersky),
    W32.HLLW.Mankx@mm (Symantec),
    W32/Palyh@MM (McAfee),
    Category: Win32
    Type: Worm
    Last Modified: 5/18/2003

    Win32.Palyh.A is a worm which spreads via e-mail using its own SMTP engine, and through shared drives.

    The only message body observed at this time contains simply:

    All information is in the attached file.

    The worm also spoofs the 'From' address. E-mail sent by the worm appears to be from the following address:


    Although there is not much we can do, it's always nice to know 'why' something is happening. :) Support Ticket Number:
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. sexy_guy

    sexy_guy Well-Known Member

    Mar 19, 2003
    Likes Received:
    Trophy Points:
    We run Mailscanner with Rav so we dont worry about it. Everthing is neatly filed in the quarentine queue and then deleted after a few days after the user gets their warning email. Support Ticket Number:

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice