I got it too (cotter.dat.scr from [EMAIL PROTECTED], with a really old Digest# in the Subject: line).
Suspected it was bugbear, based upon the filesize (50688 bytes) and a quick inspection in TextEdit, but couldn't really tell on my PowerBook ;-) Looks like it came from Seattle, judging from the headers (assuming they weren't forged). Hotmail's McAfee doesn't filter it out (although that may not say much), so perhaps it's a relatively new variant? Be careful out there, Gene (digest mode) > >------------------------------ > >Subject: Bugbear virus and LEM lists >Date: Mon, 10 Mar 2003 06:39:49 -0500 >From: Dan Knight <[EMAIL PROTECTED]> >Message-ID: <[EMAIL PROTECTED]> > >A former member of the PCI PowerMacs list was alerted to the presence of >a virus on a message purportedly sent from pci-powermacs. He emailed the >following: > >>This morning I received an email (apparantly) from >>><[EMAIL PROTECTED] >> >>Our virus scanning software, carefully updated by our professional >>paranoids, alerted me to the fact that it contained a bugbear a virus in >>an attachment (filename cotter.dat.scr) >> >>The email message itself seems real enough, until you look at the dates; > >look at the bottom of this mail. > -- PCI-PowerMacs is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | -- Sonnet & PowerLogix Upgrades - start at $169 | & CDRWs on Sale! | Support Low End Mac <http://lowendmac.com/lists/support.html> PCI-PowerMacs list info: <http://lowendmac.com/lists/pci-powermacs.shtml> --> AOL users, remove "mailto:"; Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive:<http://www.mail-archive.com/pci-powermacs%40mail.maclaunch.com/> Using a Mac? Free email & more at Applelinks! http://www.applelinks.com
