Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Message-Id: <5.1.0.14.2.20021013145544.02c86668@pop3.cris.com>
X-Sender: rrschulz AT pop3 DOT cris DOT com
Date: Sun, 13 Oct 2002 15:03:03 -0700
To: cygwin AT cygwin DOT com
From: Randall R Schulz <rrschulz AT cris DOT com>
Subject: Re: Viruses being transported with Cygwin messages
In-Reply-To: <Mahogany-0.64.2-27484-20021013-142541.00@ix.netcom.com>
References: <1034541363 DOT 5133 DOT 13 DOT camel AT lifelesswks>
 <006601c272eb$5750f680$855a580c AT who>
 <1034541363 DOT 5133 DOT 13 DOT camel AT lifelesswks>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed

Hi,

I might help to know this is the "W32 DOT Bugbear AT mm" worm. It has been 
spreading a lot lately. In today's batch I received 3 copies under 
different names (supposedly from Christopher Faylor, Gareth Pearce and 
Elfyn McBratney), each with different contents and different attachment names.

Here's what Symantec has to say about this worm: 
<http://www.sarc.com/avcenter/venc/data/w32 DOT bugbear AT mm DOT html>

Randall Schulz
Mountain View, CA USA


At 14:25 2002-10-13, Michael A Chase wrote:
>On 14 Oct 2002 06:36:02 +1000 Robert Collins <rbcollins AT cygwin DOT com> wrote:
>
> > On Mon, 2002-10-14 at 05:04, Gregg C Levine wrote:
>
> > > Folks, don't roar at me, but I am seeing a number of messages arrive 
> here,
> > > infected. One came with a message via Robert Collins, twice,
>
> > Can you point me at the message with the virus? And the virus? I email
> > from UNIX, so am *very* surprised at this.
>
>Like spam, most common email viruses forge the 'from' address.  I am seeing
>a few of these too, but, as Chris said, they aren't coming through the
>Cygwin server.


--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/