My antivirus (NA2002) found a bugbear virus sent to this beginners list (or my perllist email address - I'm not sure what to make of the headers).
Did anyone else get this email? (virus has been removed of course): If it helps anyone, I've included the culprit email and the headers: =============================================== -----Original Message----- From: Les Hall [mailto:les@;yahoogroups.com] Sent: Tuesday, November 12, 2002 2:12 AM Subject: [Fireworks] OT: (Kind of) Font used in MX panels Does anyone know what the teeny-weeny font is that Macromedia uses in the panels for MX - I'm thinking in particular of the font used for the Dreamweaver Answers panelet. It's a non-aliased font about 8pt. Thanks, Les __ http://www.leshall.com W 3 / f 6 4 / 1 / 2 5 0 t h Yahoo! Groups Sponsor ADVERTISEMENT To unsubscribe, send a blank email to [EMAIL PROTECTED] Direct link to the Fireworks site: http://www.yahoogroups.com/group/Fireworks Your use of Yahoo! Groups is subject to the Yahoo! Terms of Service. =============================================== ....If you want to see what the headers say: =============== Headers ======================= Received: from mail023.syd.optusnet.com.au [210.49.20.162] by codyartsupply.com with ESMTP (SMTPD32-6.06) id A6454F4011A; Tue, 12 Nov 2002 04:13:41 -0500 Received: from chopper (newax7-156.dialup.optusnet.com.au [198.142.199.156]) by mail023.syd.optusnet.com.au (8.11.1/8.11.1) with SMTP id gAC9Bsi30082; Tue, 12 Nov 2002 20:11:54 +1100 Date: Tue, 12 Nov 2002 20:11:54 +1100 Message-Id: <[EMAIL PROTECTED]> From: Les Hall <[EMAIL PROTECTED]> Subject: [Fireworks] OT: (Kind of) Font used in MX panels MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----------DJR53R02EA0JXRT" X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 18039 Status: U =============================================== -----Original Message----- From: Felix Geerinckx [mailto:felix_geerinckx@;hotmail.com] Sent: Tuesday, November 12, 2002 6:36 AM To: [EMAIL PROTECTED] Subject: [OT]: URGENT virus warning Through private communication I've been informed that another list member has received an email message from '[EMAIL PROTECTED]' with a subject line of 'Weekly postins statitistics - 37/2002'. This email message contained the so-called 'W32.Bugbear@mm' virus. I posted this message from '[EMAIL PROTECTED]' on September 16, through perl.beginners nntp-interface (and without a virus attached). After studying the virus information at <http://securityresponse.symantec.com/avcenter/venc/data/ [EMAIL PROTECTED]> the following quote from this webpage: "The worm also can construct addresses for the "From:" field using information that it harvests from the infected computer. For example, the worm may find the addresses [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED] The worm could create an email message addressed to [EMAIL PROTECTED] and spoof the "From:" address, so that it appears to come from [EMAIL PROTECTED] The spoofed address can also be a valid email address that the worm finds on the system. In addition to the following list of subjects, the worm can create a new message as a reply to or forward of an existing message on the infected system." makes me conclude that the system of at least one of the list members is infected by this virus. I therefore advise all fellow list members who use Windows (especially those who correspond with the 'sprocket.lockergnome.com' domain) to go to the above-mentioned webpage and download and run the removal tool. Please stay alert. The infected computer probably contains other email adresses from 'perl.beginners' list members, so everybody on the list could receive the virus, and not necessarily with a subject or (part of) an email address related to Perl! -- felix -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
