So that the anti virus messages can stop...
The virus is called bugbear. Once it's on a machine it selects a name
---From the address book or selects a name then selects a provider name
---From the address book and puts the two together as the senders name
(hence the fictitious ANDY@kaon.co.nz source address below).
It then goes through the files on the machine and selects an executable
file type, and inserts itself into the file.
Next it goes through the address book and sends itself to everyone in
the list.
It has people all round the world calling each other names. The sender
shown almost inevitably does not have the virus (and more than likely
does not even exist).
All of the anti virus sites have fixes and updates to catch it.
Tony
-----Original Message-----
Subject: Re: VWarning: forum messages containing a virus
My anti-virus software blocked the attachment that came from Andy Draper
(email address ANDY@kaon.co.nz) The subject was R: Europa_mail Speed Kit
and was addressed to undisclosed-recipients:
As far as I can see it didn't come from the Europa Forum site or have
anything which connected it with the forum other than the Subject Line.
Something funny going on, or not if your ant-virus software doesn't
catch it!
Alan
#303
----- Original Message -----
From: "Peter Saitta, AIA Principal" <saitta@netmagic.net>
Subject: Re: VWarning: forum messages containing a virus
>
>
> John Cliff wrote:
>
> >
> >
> > The forum this morning has six stalled messages containing the
> > offending
file,
> > four of them (allegedly) from forum subscribers and two from
> > 'spammers'.
None
> > of them has been distributed to subscribers, as far as I know.
>
> I received two this morning, which were promptly nuked by Dr. Norton,
> so
something
> is getting trough to some of us.
>
> Peter
>
> > I certainly
> > haven't had them. If you have posted a message in the last 2 days
> > which
hasn't
> > appeared, a virus scan on your system would be a wise precaution.
> > There
seems
> > to be genuine content in several of these, which wouldn't happen in
> > a
random
> > post by a third party.
> >
> > The forum is intended to preclude the distribution of attachments
> > (and I
haven't
> > seen any sent over it for a long time), precisely to prevent viruses
being sent
> > to you in this way.
> >
> > The mechanism suggested by Jeremy, whereby both target and apparent
'sender' are
> > selected from the address book on an infected machine, seems quite
likely. In
> > the past such messages have been sent to people purporting to come
> > from
me.
> >
> > Let us hope this tiresome virus soon fades from view.
> >
> > John Cliff
> > Europa Forum minder
> >
> > __
> > The Europa Forum is supported by Aviators Network UK
<info@avnet.co.uk>
>
>
> The Europa Forum is supported by Aviators Network UK
Europa Club website is at <http://www.europaclub.org.uk>
|