[RC5] Virus alert !

Carl Inglis wyrdrune at yoshiwara.org.uk
Thu Oct 10 13:37:34 EDT 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thursday 10 October 2002 11:45 am, PlasmaHH at gmx.net wrote:

> this is important. I have just received an email with the New
> Mail-Worm "Bugbear" attached. Someone (Probably Jeff Lawson) on
> the list has been infected with this worm. So be carefull, keep
> your virus-scanner up to date, and don't open attachments, the
> attached file was an .xls.scr file...

It arrived here too. Read the message headers. It originated from Brazil, 
*not* Jeff Lawson!

<first Received line:>
Received: from elbn-9z2s2zt4d5 (du167c.rjo.centroin.com.br 
[200.225.58.167])
        by trex.centroin.com.br (8.12.5/8.12.1) with SMTP id 
g9AA244f010252;
        Thu, 10 Oct 2002 07:02:06 -0300 (EST)

I have emailed the appropriate abuse@ and postmaster@

Please remember that Bugbear, Klez and most of the other worms doing the 
rounds *fake* the From: - It's easy to do. If you don't know how to read 
the headers then I suggest you investigate 
http://www.pcworld.com/howto/article/0,aid,34782,pg,2,00.asp

Hope that helps,

Carl
- -- 
"..as to who I am now, if you're prompted to ask: I'm the ghost of my
future and the sum of my past." 
	- Talis Kimberly, Small Mended Corners, Archetype Cafe
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.0 (GNU/Linux)

iD8DBQE9pWZ+isowi8wFwkkRAuzgAJ9XqNvdw6i6bHdc2P1ftK9zDBL16ACgvLvp
gVgzqCxNworWxVRHbSUJsjU=
=JuuQ
-----END PGP SIGNATURE-----

--
To unsubscribe, send 'unsubscribe rc5' to majordomo at lists.distributed.net
rc5-digest subscribers replace rc5 with rc5-digest



More information about the rc5 mailing list