[ECOS] Virus on message

[Conor O'Neill]

Hi all,

I'm afraid that my home machine was responsible for that - many 
apologies. Our home machine updates its virus checker once per week but 
the update for the Bugbear virus was only released a few days ago. Two 
actions as a result - updates to our virus checker will now be daily and 
Outlook Express gets the chop finally. If anyone has been infected 
please check the instructions on:

http://www.grisoft.com/html/news/bugbear.htm

Note that the mail server where I work has been hit three times so far 
today with this virus, so beware. All the latest engines should now be 
able to trap it.

Sorry again,

Conor O'Neill


Iztok Zupet wrote:
> On Thu, 2002-10-03 at 16:34, Peter Vandenabeele wrote:
> 
>>This is very typical for the Klez virus.
> 
> 
> Very probably it's not Klez, since my sweep (updated last month)
> intercepts it. Must be something else.
> 
> 
>>The From: (and sometimes also From) is spoofed. This makes it harder 
>>to fight the virus due to confusion amongst less experienced recipients
>>of the virus.
>>
>>This one actually came from:
>>
>>  Received: from unknown (HELO relay05.indigo.ie) (194.125.133.229)
>>    by ione.mind.be with SMTP; 2 Oct 2002 19:16:33 -0000
>>  Received: (qmail 95461 messnum 1194794 invoked from network[194.125.174.75/ts09-075.dublin.indigo.ie]); 2 Oct 2002 19:18:49 -0000
>>  Received: from ts09-075.dublin.indigo.ie (HELO sturm) (194.125.174.75)
>>    by relay05.indigo.ie (qp 95461) with SMTP; 2 Oct 2002 19:18:49 -0000
>>
> 
> 
> That's the same header as I received. So "indigo.ie" subscribers watch
> out for virus!
> 
> Regards
> iz
> 
> 
> 


-- 
Before posting, please read the FAQ: http://sources.redhat.com/fom/ecos
and search the list archive: http://sources.redhat.com/ml/ecos-discuss