Hi all. This is not a hoax.

>
>
>                A new, rapidly spreading worm has been identified called
> "Bugbear".
>
>               This worm disables security (antivirus and firewall)
> software and can steal passwords and credit card details (it installs a
> keystroke logger on your PC and transmits all of your keystrokes to an
> outside site).  The worm also infects all other pc's on the network via
> the address book and network shares.
>
>               The infected emails are headed by a variety of greetings
> intended to trick users into allowing them into their computer. The user
> can get infected by clicking on the attachment. It is common for the
> infected attachment to have a double-extension such as doc.pif.  Some
> possible message lines include:
>
> *     25 merchants rising
> *     announcement
> *     bad news
> *     call for information!
> *     click on this!
> *     Correction of errors
> *     Cows
> *     Hi there!
> *     I'm alive, I'm alive, I'm alive!
>
>               So far, our anti-virus software has identified three
> instances of this worm in our email system.  The emails contained the last
> two subject lines above.  The emails have subsequently been purged.
>
>               While we are catching and purging the worm entering our
> email server, this virus could be ahead of the updates on some of our
> desktops.  It is still possible to infect our network by using an
> unprotected home computer with a secure connection into the corporate
> network or using personal email accounts at work (Juno, Mindspring, AOL,
> etc.).
>
>               Please update your home computers with the latest anti-virus
> signatures, particularly if you connect in to Delaware's network, and be
> careful when opening attachments (this virus can spoof or forge the name
> in the From: field - so it might appear that you know the sender).
>
>       Susan Cima, CISA, GSEC
>       Information Security Administrator
>
>


-----------------------------------------------------
To Unsubscribe please visit www.chevelles.net/list.html
To start a new topic, send mail to: [EMAIL PROTECTED]

Reply via email to