Hi Peter,

I would also be worried if McAfee.com was infected, but I highly doubt
it. See below for my reasoning.

I would guess that the virus you mention is one of the two following
possibilities:

1. It was either the BugBear or Klez virus. These virus fakes the email
address that they are coming from, so that you cannot determine where it
actually came from. They do this by extracting email addresses from the
infected computers email address book. Klez picks one address to send
to, and one to send from. BugBear takes one address to send to, and then
uses parts of other addresses to create a fake address (ie.  [EMAIL PROTECTED]  +
[EMAIL PROTECTED] + [EMAIL PROTECTED] = [EMAIL PROTECTED])

2. The message was an actual message from mcafee, and was a "Virus
newsletter" describing new threats. I regularly see these kind of
messages being blocked by virus scanners, usually because they contain
detailed descriptions of the viruses, and the virus scanner assumes
these partial descriptions (often attachment names) are the actual
virus. Not knowing anything specific about "Mailwasher" I can't say for
sure, but this is most probably the case.

Hope this clarifies things,
Let me know if you find out any more about it (especially if McAfee is
REALLY infected :-) ),
Cheers,
Ben Murphy.
Leeton Gliding Club

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Peter
Stephenson
Sent: Wednesday, 9 October 2002 5:50 PM
To: Soaring List; *Nat. Div. List; **CGC List
Cc: [EMAIL PROTECTED]
Subject: [aus-soaring] Mailwasher & McAfee.com and a virus
Importance: High


Courtesy of Mailwasher, I was able to bounce  a viral attachment from
[EMAIL PROTECTED]  Any one else received one?

Sounds a bit worrying if McAfee.com has been infected. I use Norton.

PeterS



--
  * You are subscribed to the aus-soaring mailing list.
  * To Unsubscribe: send email to [EMAIL PROTECTED]
  * with "unsubscribe aus-soaring" in the body of the message
  * or with "help" in the body of the message for more information.


--
  * You are subscribed to the aus-soaring mailing list.
  * To Unsubscribe: send email to [EMAIL PROTECTED]
  * with "unsubscribe aus-soaring" in the body of the message
  * or with "help" in the body of the message for more information.

Reply via email to