Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More. is a Worm

Discussion in 'General Discussion' started by Website Rob, May 23, 2003.

  1. Website Rob

    Website Rob Well-Known Member

    Mar 23, 2002
    Likes Received:
    Trophy Points:
    Alberta, Canada
    cPanel Access Level:
    Root Administrator
    For those (like myself) that have been wondering about the returned eMails or the ones sitting in the Mail queue with that return address, I have found out it is the result of a new Worm.

    Alias: I-Worm.Palyh (Kaspersky),
    W32.HLLW.Mankx@mm (Symantec),
    W32/Palyh@MM (McAfee),
    Category: Win32
    Type: Worm
    Last Modified: 5/18/2003

    Win32.Palyh.A is a worm which spreads via e-mail using its own SMTP engine, and through shared drives.

    The only message body observed at this time contains simply:

    All information is in the attached file.

    The worm also spoofs the 'From' address. E-mail sent by the worm appears to be from the following address:


    Although there is not much we can do, it's always nice to know 'why' something is happening. :) Support Ticket Number:
  2. sexy_guy

    sexy_guy Well-Known Member

    Mar 19, 2003
    Likes Received:
    Trophy Points:
    We run Mailscanner with Rav so we dont worry about it. Everthing is neatly filed in the quarentine queue and then deleted after a few days after the user gets their warning email. Support Ticket Number:

Share This Page