VIRUS was RE: independent maintenance thread in my app

Hi Everyone,

I just wanted to assure you that this virus is not coming from me.  Yes it has 
my name on the FROM field. (From field is forged).  Evidently someone out there 
has the BugBear virus.  It looks through old emails on the persons PC, and 
resends them with a virus attached.  That message was a legitimate message from 
many, many months ago.  This virus causes a lot of misunderstandings and ill 
will.  Because it impersonates other people.  If you view the headers, you will 
see that it did not originate from my companies domain.  (pihana.com) I also 
have received this very email message.  In my case it came from a dialup PC..
Received: from tournan (orleans-2-a7-62-147-178-54.dial.proxad.net 
[62.147.178.54])

Does anyone have a workstation named "tournan" with proxad.net as the ISP?  If 
so you probably are infected!

I have virus protection on our company email servers, and on all our company 
PC's including mine.  
If you view the headers,  I am certain you will see that it is not from me..

This virus was trapped coming in to our network..

This virus is nasty, it tries to shutdown your personal firewalls, and your 
virus protection programs!

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@xxxxxxx

Sorry for the confusion!

Mike Warne.




-----Original Message-----
From: Mike Schubert [mailto:schubi@xxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, October 16, 2002 9:40 PM
To: enhydra@xxxxxxxxxxx
Subject: RE: Enhydra: independent maintenance thread in my app



!!! ALERT !!!

in the mail of Mike Warne was a virus.
See scanmessage below...

On Wed, 16 Oct 2002, Mike Warne wrote:

> ------------------  Virus Warning Message (on rathole)
> 
> Found virus WORM_BUGBEAR.A in file FORMATION
> The uncleanable file FORMATION is moved to /var/iscan/virus/virNHCIJjypr.
> 
> ---------------------------------------------------------
> 

-- 
sincerely

Mike Schubert             Tel.: ++49-351-3 18 09 15
interface projects GmbH   Fax.: ++49-351-3 36 11 87
Tolkewitzer Str.49        E-Mail: mike.schubert@xxxxxxxx
D-01277   D R E S D E N   HTTP:   www.interface-business.de/

"FreeBSD is like a wigwam, no windows, no gates and an apache inside."


_______________________________________________
Enhydra mailing list
Enhydra@xxxxxxxxxxx
http://www.enhydra.org/mailman/listinfo.cgi/enhydra