Return-Path: Received: (qmail 20202 invoked from network); 11 Jan 2002 15:48:44 -0000 Content-Transfer-Encoding: 8bit Received: from unknown (HELO warrior.services.quay.plus.net) (212.159.14.227) by excalibur.plus.net with SMTP; 11 Jan 2002 15:48:44 -0000 X-Priority: 3 X-MSMail-Priority: Normal Received: (qmail 7239 invoked from network); 11 Jan 2002 15:48:43 -0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Received: from unknown (HELO post.thorcom.com) (212.172.148.70) by warrior.services.quay.plus.net with SMTP; 11 Jan 2002 15:48:43 -0000 Received: from majordom by post.thorcom.com with local (Exim 3.33 #2) id 16P3p3-0000vX-00 for rsgb_lf_group-outgoing@blacksheep.org; Fri, 11 Jan 2002 15:42:25 +0000 Received: from dargolad.esoterica.pt ([195.22.0.27]) by post.thorcom.com with esmtp (Exim 3.33 #2) id 16P3p2-0000vS-00 for rsgb_lf_group@blacksheep.org; Fri, 11 Jan 2002 15:42:24 +0000 Received: from srv17slx.esoterica.pt (srv17slx.esoterica.pt [195.22.0.47]) by dargolad.esoterica.pt (8.11.6/8.11.6) with ESMTP id g0BFfbK19066 for ; Fri, 11 Jan 2002 15:41:37 GMT Received: from slave-6 (por420.esoterica.pt [195.22.18.121]) by srv17slx.esoterica.pt (8.11.6/8.11.6) with SMTP id g0BFfZv05827 for ; Fri, 11 Jan 2002 15:41:36 GMT Message-ID: <3.0.5.32.20020111154258.0099b100@pop3.esoterica.pt> X-Sender: brian@pop3.esoterica.pt (Unverified) X-Mailer: QUALCOMM Windows Eudora Light Version 3.0.5 (32) Date: Fri, 11 Jan 2002 15:42:58 +0000 To: rsgb_lf_group@blacksheep.org From: "Brian Rogerson" Subject: LF: Virus MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Precedence: bulk Reply-To: rsgb_lf_group@blacksheep.org X-Listname: rsgb_lf_group Sender: May I start with apologies. On switching on this morning the modem was called and connected to the ISP before I called the e-mail programme. Watching in open mouthed amazement the system blasted goodness knows what into "ether" of the www before I reacted and tore the modem cable out of the wall socket. The virus protection programme eventually told me it was W32/MsInit.worm.b residing in Window/System/Wininit.exe It would appear unlikely to have arrived as an attachment and probably was received while working with I_Link yesterday. Computers with the "C" drive "share" open are said to be vulnerable. I sincerely hope I have not passed this menace on to anybody and apologise again if I have. 73, Brian 73 Brian CT1DRP IN51QD 41 09 58N 08 39 11W http://homepage.esoterica.pt/~brian