Very interesting - I just got email supposedly from the list with a file
called "fish.com" attached; I'm certain that's a virus!
I'm safe - telnetting from my well-secured PC into an
even-better-secured
Solaris/UNIX network is how I get my email - but some folks might want
to
watch their inboxes & virii checkers if a spammer/virus has hold of the
GZG-L address.
If our friendly list-admin wants me to forward the msg. to them w/
extended headers I can; not that I think it'll do much good. Ex. headers say
it came from a mindspring.com addy, with an obviously spoofed username.
All that talk about what to do with spammers a few days ago - let's add
virus breeders to that group! I might be in favour of the death penalty after
all...:)
For what it's worth, it's likely the new version of Beagle.AG that came out
today. Symantec (www.symantec.com) has a removal tool (in case you're gullible
enough to double click and open it!) and the latest intelligent
updater has virus defs, though they don't seem to work on an actively infected
machine.
Most of the ones I've seen today have a subject line of "Re:".
Let's be careful out there.
:)
John
--On Monday, July 19, 2004 10:29 PM -0700 Brian Burger
> <yh728@victoria.tc.ca> wrote:
> Very interesting - I just got email supposedly from the list with a
headers
> say it came from a mindspring.com addy, with an obviously spoofed
From: "John K. Lerchey" <lerchey@andrew.cmu.edu>
> For what it's worth, it's likely the new version of Beagle.AG that
Most of the ones I've seen today have a subject line of "Re:".
59 received so far today...
I only got one, I'm just not loved......)
> On Tue, 20 Jul 2004, Alan and Carmel Brain wrote:
> From: "John K. Lerchey" <lerchey@andrew.cmu.edu>
Not fun. I got ~75 over Thursday & Friday last week, then stopped getting any
until the one this evening. My email provider (local community freenet) is
pretty fast about filter adjustments, happily.
This is, however, the first spam/virii I've ever gotten with a 'real'
email address - ie one I recognized - as the forged 'From' addy. That's
what prompted my original warning email... some listmember might be hosting
this thing...