13.2590, All: Virus Warning

[LINGUIST List]

LINGUIST List:  Vol-13-2590. Wed Oct 9 2002. ISSN: 1068-4875.

Subject: 13.2590, All: Virus Warning

Moderators: Anthony Aristar, Wayne State U.<aristar at linguistlist.org>
            Helen Dry, Eastern Michigan U. <hdry at linguistlist.org>

Reviews (reviews at linguistlist.org):
	Simin Karimi, U. of Arizona
	Terence Langendoen, U. of Arizona

Consulting Editor:
        Andrew Carnie, U. of Arizona <carnie at linguistlist.org>

Editors (linguist at linguistlist.org):
	Karen Milligan, WSU 		Naomi Ogasawara, Arizona U.
	James Yuells, EMU		Marie Klopfenstein, WSU
	Michael Appleby, EMU		Heather Taylor, EMU
	Ljuba Veselinova, Stockholm U.	Richard John Harvey, EMU
	Dina Kapetangianni, EMU		Renee Galvis, WSU
	Karolina Owczarzak, EMU		Anita Huang, EMU
	Tomoko Okuno, EMU		Steve Moran, EMU
	Lakshmi Narayanan, EMU		Sarah Murray, WSU
	Marisa Ferrara, EMU

Software: Gayathri Sriram, E. Michigan U. <gayatri at linguistlist.org>
          Zhenwei Chen, E. Michigan U. <chen at linguistlist.org>
	  Prashant Nagaraja, E. Michigan U. <prashant at linguistlist.org>

Home Page:  http://linguistlist.org/

The LINGUIST List is funded by Eastern Michigan University, Wayne
State University, and donations from subscribers and publishers.



Editor for this issue: Anthony Rodrigues Aristar <aristar at linguistlist.org>
 ==========================================================================


=================================Directory=================================

1)
Date:  9 Oct 2002 23:11:37 -0000
From:  linguist at linguistlist.org
Subject:  Virus Warning

-------------------------------- Message 1 -------------------------------

Date:  9 Oct 2002 23:11:37 -0000
From:  linguist at linguistlist.org
Subject:  Virus Warning

Dear Subscribers:

We would like to warn you that there is a new (and dangerous) virus
now out there that may affect you.  This virus, called
W32/Bugbear at MM, propagates itself by mimicking valid messages from
valid addresses.

One of the things this worm does is to construct valid-seeming
mail-addresses from the mail-messages it finds on the machine it has
infected. For example, if it finds a message from the LINGUIST list
and one from aaa at hotmail.com, it may send out a message which
seems to come from linguist at hotmail.com, which is constructed from
both addresses.  It may also send out messages that appear to come
from both of the valid addresses as well.

What this means is that when the message arrives it can look very
similar to a valid mail message, similar enough so that the
differences can escape a quick glance.

There is a very easy way to tell the difference, however.  LINGUIST
list *never* sends out any messages with attachments. If you receive a
message that seems to be from LINGUIST and contains an attachment,
delete it.  It cannot be from us.

Most important: be wary of any messages with attachments, even if they
seem to come from a close friend.

For more information on this worm, go to the following site:

http://securityresponse.symantec.com/avcenter/venc/data/w32.bugbear@mm.html

Our regards, and regrets

LINGUIST

---------------------------------------------------------------------------
LINGUIST List: Vol-13-2590