----[Please read http://ercoupers.com/disclaimer.htm before following any
advice in this forum.]----


Yes, it's Bugbear, and yes, it's related to this list, as I got my
copy signed by Syd Cohen, but it also came from an
Earthlink/Mindspring dial-up and Syd is on Worldnet.

One of the hallmarks of bugbear is that it uses its own
internal SMTP service (how hi-tech!) and so no identity
checking is done by the ISP it purports to come from
because it doesn't come from there.

Note, also, that bugbear attempts to short-circuit (permanently)
your anti-virus software, and will do so if it slips past an
old virus definitions file. That means that you have to do
more than just an update of that file.

So if you're an Earthlink or Mindspring user on this list,
PLEASE update and run your virus scan and PLEASE
take whatever steps your vendor recommends to remove
Bugbear and undo its damage to the antivirus software
itself.

I know Symantec has a standalone bugbear removal tool.

Greg

At 10:31 AM 10/23/02 -0700, Candy and Bruce Hughes wrote:
>----[Please read http://ercoupers.com/disclaimer.htm before following any

>advice in this forum.]----
>
>
>somebody who knows us  --
>who is using either Earthlink or
>Mindspring
>
>has a virus
>
>one just hit my inbox, purporting to
>come from the unholy alliance of
>Jack Russell and Percy Wood
>(originating email was "[EMAIL PROTECTED]")
>which we all know is impossible
>
>if you use either of those services,
>just a heads up  --  it could be you
>
>it's of a size to be Bugbear ...
>so I'm not going to see what
>"A bad week"
>is all about
>
>Candy
>(who just ran my updated-yesterday
>antivirus to make sure)
>
>=========================================================================
=====
>To leave this forum go to: http://ercoupers.com/lists.htm
>

==========================================================================
====
To leave this forum go to: http://ercoupers.com/lists.htm



<<attachment: winmail.dat>>

Reply via email to