The Bugbear virus is an offshoot of the "klez" family. As such, it forges the return address (authority: http://vil.nai.com/vil/content/v_99728.htm). The "from" address on the message is very likely NOT the person who sent it. Sometimes you can determine the sender by examining the message headers (Received:) , except that if it went through Lyris (jdjlist), then Lyris has stripped the interesting ones.
So the names below are likely in the address book of the offender(s), who also has jdjlist in his/her address book, but they are likely NOT the actual offenders. =Spencer Luc Foisy wrote: >Sometime since I was at work last night I recieved two emails with an attachment >infected with the bugbear virus. >http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=4035 > >Please be aware of such. It is an email worm that is considered a medium risk by >Mcafee. It attempts to disable virus protection and such. Both of these email did not >seem to fit Mcafee's listed criteria for subject and body content, and appeared as >legitimate JDJ mail (although in a foreign language) >Luckily our virus server picked them off. > >Passed along through the two people listed below. > >Rehak Rastislav [[EMAIL PROTECTED]] >Ladislav ?ahour [[EMAIL PROTECTED]] > >Luc Foisy > > >____________________________________________________ >To change your JDJList options, please visit: >http://www.sys-con.com/java/list.cfm > >Be respectful! Clean up your posts before replying >____________________________________________________ > > ____________________________________________________ To change your JDJList options, please visit: http://www.sys-con.com/java/list.cfm Be respectful! Clean up your posts before replying ____________________________________________________
