What's this?

[samcross]

After turning on my computer today, I noticed something had appeared on my desktop called "e ticket.rtf" I opened it and it appears to be an Outlook Express email, weird since I do not use outlook express and do not have an account with it.

It goes on for pages and pages and this is the introduction of it:

"This email has been generated by an =lectronic process and replies will not be actioned.

PLEASE CHECK =HE FOLLOWING CAREFULLY TO ENSURE ALL DETAILS ARE CORRECT

We have =leasure in confirming the following reservation for AMEEN/BATULMS , =OYD/MICHAELMR , CORCORAN/AMYMS, CROSSMAN/SOPHIEMS , CROUCH/CEFINMS , =DGELL/JAMESMR, FAHEEM/MOHAMEDFAHADMR , FOGG/ROBERTMR, FRANCIS/JOHNMR , =LENNON/ANDREWMARKMR, HILL/ELEANORMS , JENKINS/RHODRIMR, =ONGWE/NAYASHAJOYCEMS , KOTECHA/BIJESHMR, LIM/SUHSIENMS , =ONG/TERILOUISEMS , MORGAN/RHYSMR, NAYLOR/SUZANNAHRUTHMS , =AYLOR/MARKMR, PAULL/NICOLAVICTORIAMS , PENLINGTON/THOMASLLOYDMR, =AFFIQFAZAL/SIBTAINMR , SAEED/MAHBOOBAVAISMR, SEAH/EUGENIAMS & =ILLIAMS/DAMIANMR.

Electronic Ticket Reservation. This itinerary =s required for travel."

It is from "CORREX@TRXCORREX.COM" Never heard of them.
And is addressed to "Julie Deacon" Never heard of her.

My initial suspicion was some kind of spyware/virus but I ran an up-to-date scan of my computer and no viruses were detected.

Does anyone have a clue as to what this is.
HELP!!!

[Jay]

its a virus.

[Infinite]

yep!

[samcross]

Thought so
So what do I do if the virus checker doesn't detect it?

[Emirzan]

Ensure you have the most up to date virus definitions for your virus scanner and then re-scan the computer. If this doesn't catch it I'd probably try a different virus scanner since it's not very reassuring to have one that has clearly missed an infection.

[samcross]

Updated and I am rescanning now, come on Norton

[s_kinton]

Updated and I am rescanning now, come on Norton

Ditch Norton and change to Kapersky or Avast

[peterb]

trxcorrex.com does exist and is a legitimate domain name, and apperas to be linked with an online pharmacy, although there is no active website associated with it.

The text that you pasted is consistent with airline/travel agent formatted text systems.

A google search did not indicate that it was a virus or malware, and as most search engine companies respond quickly to new malware, the chances of it being a virus are small.

However, if the domain name is linked to an online pharmacy, what are they doing sending out passenger lists? And how did that file get onto youur desktop?

So while I don't think you need hit the panic button, running an online virus check (trend offer that service) would be worthwhile, as would downloading one of the free AV checkers (Avast, F-prot). Nortan AV (part of Symantec) isn't regarded as one of the better AV products, so you may want to consider changing. Nod 32 is quite highly regarded.