Re: [ST] Virus Alerts

["Mike Bostock" <mike@xxxxxxxxxxxxxx>]

In your message regarding Re: [ST] Virus Alerts dated Tue, 08 Oct 2002 09:32:43
- -0600, Lex Offer said that ...

>LO-  was not a false positive.  an email was sent out that appeared to be from the list that had a
document encoded in it.  That doc file was infected with the bugbear worm.
>LO-  
>LO-  Here is some more info.
>LO-  
>LO-  http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@xxxxxxx

It undoubtedly wasn't from the list but Bugbear is capable of spoofing the
From: address.  Eric's list-server is set to remove HTML or any attachments so
this list will not be the source.

On two lists that I administer users have become infected with Bugbear (not
through the lists I hasten to add).  It is becoming a considerable nuisance - I
have received over ten copies of it already :-(

Do make sure you AntiVirus software is up-to-date.

- -- 
Mike Bostock
http://www.toothfairy.co.uk/
Wales & SW ST Riders
http://www.sprint-st.org/

'99 Red ST

     *   *   *   *   *   *   *   *   *   *   *   *   *   *   *   *   *   *   *
      The ST/RS Mailing list is sponsored by Jack Lilley Ltd.
          http://www.TriumphNet.com/st/lilley for more info
   http://www.TriumphNet.com/st for ST, RS and Mailing List info

=-=-=-= Next Message =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=