Return-Path: Received: (qmail 24611 invoked from network); 2 Oct 2002 09:22:48 -0000 Received: from marstons.services.quay.plus.net (212.159.14.223) by mailstore with SMTP; 2 Oct 2002 09:22:48 -0000 Received: (qmail 13269 invoked by uid 10001); 2 Oct 2002 10:26:35 -0000 X-Priority: 3 X-MSMail-Priority: Normal Received: from post.thorcom.com (193.82.116.70) by marstons.services.quay.plus.net with SMTP; 2 Oct 2002 10:26:35 -0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-SQ: A Received: from majordom by post.thorcom.com with local (Exim 4.10) id 17wfgV-00032S-00 for rsgb_lf_group-outgoing@blacksheep.org; Wed, 02 Oct 2002 10:20:47 +0100 Received: from [194.73.73.111] (helo=gadolinium.btinternet.com) by post.thorcom.com with esmtp (Exim 4.10) id 17wfgU-00032I-00 for rsgb_lf_group@blacksheep.org; Wed, 02 Oct 2002 10:20:46 +0100 Received: from host62-7-65-54.in-addr.btopenworld.com ([62.7.65.54] helo=dave) by gadolinium.btinternet.com with esmtp (Exim 3.22 #8) id 17wfgU-0003NX-00 for rsgb_lf_group@blacksheep.org; Wed, 02 Oct 2002 10:20:46 +0100 From: "Dave Sergeant" To: rsgb_lf_group@blacksheep.org Date: Wed, 02 Oct 2002 10:23:34 +0100 MIME-Version: 1.0 Message-ID: <3D9AC926.15019.CBCAAF@localhost> In-reply-to: <000101c26931$018061a0$085e063e@main> X-Mailer: Pegasus Mail for Windows (v4.02) Content-Description: Mail message body Subject: Re: LF: Questionable mail.... Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Status: No, hits=-3.4 required=5.0tests=IN_REP_TOversion=2.31 Sender: Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group On 1 Oct 2002 at 9:50, Alan Melia wrote: > Hi all, there seems to be another bout of funnies in circulation. I > have just received a couple of mails from different senders with a 69k > attachment, which would seem to bear no relation to the subject header > and looks like one of the 'dreaded' double extension files. This is > slightly different to what came round before so it maybe a slight > mutation. Thanks to previous ideas (Ta Dave G3YMC) these were trapped > and expunged. Cheers de Alan G3NYK alan.melia@btinternet.com This is the Bugbear virus (W32/BugBear@mm or Tanatos), see http://www.f-prot.com/news/vir_alert/bugbear.html). I received a couple myself this morning. New virus signatures are now available, make sure you update your virus software. 73s Dave G3YMC dsergeant@iee.org dsergeant@btinternet.com http://www.dsergeant.btinternet.co.uk