Through private communication I've been informed that another list
member has received an email message from
'[EMAIL PROTECTED]'
with a subject line of
'Weekly postins statitistics - 37/2002'.
This email message contained the so-called 'W32.Bugbear@mm' virus.
I posted this message from '[EMAIL PROTECTED]' on September
16, through perl.beginners nntp-interface (and without a virus
attached).
After studying the virus information at
<http://securityresponse.symantec.com/avcenter/venc/data/
[EMAIL PROTECTED]>
the following quote from this webpage:
"The worm also can construct addresses for the "From:" field using
information that it harvests from the infected computer. For
example, the worm may find the addresses [EMAIL PROTECTED], [EMAIL PROTECTED] and
[EMAIL PROTECTED] The worm could create an email message addressed to
[EMAIL PROTECTED] and spoof the "From:" address, so that it appears to come
from [EMAIL PROTECTED] The spoofed address can also be a valid email
address that the worm finds on the system.
In addition to the following list of subjects, the worm can
create a new message as a reply to or forward of an existing
message on the infected system."
makes me conclude that the system of at least one of the list members
is infected by this virus.
I therefore advise all fellow list members who use Windows
(especially those who correspond with the 'sprocket.lockergnome.com'
domain) to go to the above-mentioned webpage and download and run the
removal tool.
Please stay alert. The infected computer probably contains other
email adresses from 'perl.beginners' list members, so everybody on
the list could receive the virus, and not necessarily with a subject
or (part of) an email address related to Perl!
--
felix
--
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
