From: owner-alloy-digest@smoe.org (alloy-digest) To: alloy-digest@smoe.org Subject: alloy-digest V8 #136 Reply-To: alloy@smoe.org Sender: owner-alloy-digest@smoe.org Errors-To: owner-alloy-digest@smoe.org Precedence: bulk X-To-Unsubscribe: Send mail to "alloy-digest-request@smoe.org" X-To-Unsubscribe: with "unsubscribe" as the body. alloy-digest Tuesday, August 19 2003 Volume 08 : Number 136 Today's Subjects: ----------------- Re: Alloy: [OT] virus check suggested ["Paulo" ] RE: Alloy: [OT] virus check suggested ["Robin Thurlow" ] Re: Alloy: [OT] virus check suggested ["Bill Hargreaves" Subject: Re: Alloy: [OT] virus check suggested I also received Bugbear from someone in Alloy. Fortunately Norton Antivirus deleted it. Please check your machines. Paulo - ----- Original Message ----- From: "Paul Baily" To: Sent: Sunday, August 17, 2003 7:26 PM Subject: Alloy: [OT] virus check suggested > > Hi all, > > At about 1:50am (GMT +10:00) I received several bounces as a result of > some PC out there trying its best to propagate the Bugbear virus. > > Because this critter fakes the from address it's hard to track down the > source, but the fact that the faked from addresses included > robinthurlow, bcracknell (both are valid alloy addresses - if they > didn't end with @paulbaily.com that is), and on one bounce used a > subject line that looked like a reply to an Alloy message, I think one > of our subscribers may have a sick PC. > > The sender headers are inconclusive, but suggest possibly someone using > Energis as their ISP may be the unwitting > source. > > Either way, may I suggest everyone does an anti-virus definition update > and runs a quick check on each PC they use for email (if they're > running Windows) just to be sure? Bugbear is pretty invisible and > includes keylogging capabilities so even if your PC is making all the > right noises it would pay to err on the side of caution... > > For more info: > w32.bugbear.b@mm.html> > > and the actual variant that came through in the bounces: > > w32.bugbear.b.dam.html> > > You can find quite a good (reportedly!) freeware anti-virus program > here if you're not already running one: > > > > cheers, > > Paul. > > [hey Crackers, what episode was that first elite speak one? Think it's > relevant to the scriptkiddies who kitsetted this thing. :-) ] ------------------------------ Date: Mon, 18 Aug 2003 09:59:27 -0400 From: "Robin Thurlow" Subject: RE: Alloy: [OT] virus check suggested I've received it too, with the subscription addresses of a few Alloy-ites (including myself) The only PC I use is my University one & they crack down on viruses regularly. We have updated and hopefully reliable pest control. I can ask Tina if she knows about this one. I also got a few from our names at (name)@programmer.net Some virus nut has tried to take advantage of the power outage here in the northeast, trying to catch systems off-guard, so-to-speak? Hope you're all well, xx ~r ------------------------------ Date: Mon, 18 Aug 2003 13:54:46 -0700 From: esoul Subject: Alloy: free offer (no, not a virus!) Hey, I got an email from Robin's computer with some gibberish and the subject line was "tatu" - sorry indeed Robin if what I am calling "gibberish" was really a coherent point you were making! :) Well, to lighten the mood, I'd like to have a little fun with the Thomas Dolby afficianadoes. (Is that spelled correctly?) To the point: I have made a home studio album which is getting some really nice reviews, and I feel the songwriting is right up T. Dolby's street, if you know what I mean. To confirm this possibility, I'd like to give out five free copies of my CD to Alloy members, with my best wishes for their musical enjoyment . . . but as usual there is a catch . . . I'll divvy up the five to the individuals who write me an email (sent from the "Contact" link at my website http://www.emeraldsoul.com ) that answers the following questions: In 25 words, more or less, tell me why you think Thomas' music is so good, and how it has affected/improved/changed your life. that's it. Do a little writing, maybe score a free CD of mine. Sound like fun?!? It would be my pleasure to read your response and share my own music with you! Details: You have one week. Don't send any attachments (in light of recent events). And don't use this address to reply to - use the "contact" link as described above. thanks then, ready to have some fun, - -Tom http://www.emeraldsoul.com ------------------------------ Date: Mon, 18 Aug 2003 22:38:52 +0100 From: "Bill Hargreaves" Subject: Re: Alloy: [OT] virus check suggested --- Robin Thurlow wrote: > > I've received it too, with the subscription > addresses of a few Alloy-ites > (including myself) The only PC I use is my > University one & they crack down > on viruses regularly. We have updated and hopefully > reliable pest control. > I can ask Tina if she knows about this one. I also > got a few from our names > at (name)@programmer.net > > Some virus nut has tried to take advantage of the > power outage here in the > northeast, trying to catch systems off-guard, > so-to-speak? > > Hope you're all well, > xx > ~r ------------------------------ Date: Mon, 18 Aug 2003 22:48:45 +0100 From: "Bill Hargreaves" Subject: Re: Alloy: [OT] virus check suggested Hi guys, Bugbear is sneaky in that it presents itself as if it came from someone who's address is in your address book, but in fact it is highly unlikely that it came from them. This extract from McAfee's site explains. "This worm has the ability to spoof, or forge, the 'From:' field. (Often set to an address found on the victim's machine). Additionally the virus can use a fabricated from address, by taking the name before the "@" sign of one address, and the domain name after the "@" sign of another address. (ie. name1@domain1.com + name2@domain2.com = name1@domain2.com) " So, wherever it came from it wasn't Robin. Bill Alias Slarvibarglhee - who currently can't mail from his Slarv address because his dog damn internal modem is no longer recognised by his PC. --- Robin Thurlow wrote: > > I've received it too, with the subscription > addresses of a few Alloy-ites > (including myself) The only PC I use is my > University one & they crack down > on viruses regularly. We have updated and hopefully > reliable pest control. > I can ask Tina if she knows about this one. I also > got a few from our names > at (name)@programmer.net > > Some virus nut has tried to take advantage of the > power outage here in the > northeast, trying to catch systems off-guard, > so-to-speak? > > Hope you're all well, > xx > ~r ------------------------------ Date: Mon, 18 Aug 2003 22:48:54 +0100 From: "Bill Hargreaves" Subject: Re: Alloy: [OT] virus check suggested Hi guys, Bugbear is sneaky in that it presents itself as if it came from someone who's address is in your address book, but in fact it is highly unlikely that it came from them. This extract from McAfee's site explains. "This worm has the ability to spoof, or forge, the 'From:' field. (Often set to an address found on the victim's machine). Additionally the virus can use a fabricated from address, by taking the name before the "@" sign of one address, and the domain name after the "@" sign of another address. (ie. name1@domain1.com + name2@domain2.com = name1@domain2.com) " So, wherever it came from it wasn't Robin. Bill Alias Slarvibarglhee - who currently can't mail from his Slarv address because his dog damn internal modem is no longer recognised by his PC. --- Robin Thurlow wrote: > > I've received it too, with the subscription > addresses of a few Alloy-ites > (including myself) The only PC I use is my > University one & they crack down > on viruses regularly. We have updated and hopefully > reliable pest control. > I can ask Tina if she knows about this one. I also > got a few from our names > at (name)@programmer.net > > Some virus nut has tried to take advantage of the > power outage here in the > northeast, trying to catch systems off-guard, > so-to-speak? > > Hope you're all well, > xx > ~r ------------------------------ Date: Mon, 18 Aug 2003 22:50:06 +0100 From: "Bill Hargreaves" Subject: RE: Alloy: [OT] virus check suggested Hi guys, Bugbear is sneaky in that it presents itself as if it came from someone who's address is in your address book, but in fact it is highly unlikely that it came from them. This extract from McAfee's site explains. "This worm has the ability to spoof, or forge, the 'From:' field. (Often set to an address found on the victim's machine). Additionally the virus can use a fabricated from address, by taking the name before the "@" sign of one address, and the domain name after the "@" sign of another address. (ie. name1@domain1.com + name2@domain2.com = name1@domain2.com) " So, wherever it came from it wasn't Robin. Bill Alias Slarvibarglhee - who currently can't mail from his Slarv address because his dog damn internal modem is no longer recognised by his PC. --- Robin Thurlow wrote: > > I've received it too, with the subscription > addresses of a few Alloy-ites > (including myself) The only PC I use is my > University one & they crack down > on viruses regularly. We have updated and hopefully > reliable pest control. > I can ask Tina if she knows about this one. I also > got a few from our names > at (name)@programmer.net > > Some virus nut has tried to take advantage of the > power outage here in the > northeast, trying to catch systems off-guard, > so-to-speak? > > Hope you're all well, > xx > ~r ------------------------------ Date: Mon, 18 Aug 2003 22:51:57 +0100 From: "Bill Hargreaves" Subject: Alloy: Apologies for the multiple postings Apologies for the multiple postings. I'm having a leetle trouble nailing this PC down but I'll get there in the end. Slarv ------------------------------ Date: Mon, 18 Aug 2003 14:59:14 -0700 From: "David Abbitt" Subject: RE: Alloy: free offer (no, not a virus!) Oh be careful Tom lest Praest accuses you of clotting the group with spam! Delurking. Dabbitt - -----Original Message----- From: owner-alloy@smoe.org [mailto:owner-alloy@smoe.org] On Behalf Of esoul Sent: Monday, August 18, 2003 1:55 PM To: alloy@smoe.org Subject: Alloy: free offer (no, not a virus!) Hey, I got an email from Robin's computer with some gibberish and the subject line was "tatu" - sorry indeed Robin if what I am calling "gibberish" was really a coherent point you were making! :) Well, to lighten the mood, I'd like to have a little fun with the Thomas Dolby afficianadoes. (Is that spelled correctly?) To the point: I have made a home studio album which is getting some really nice reviews, and I feel the songwriting is right up T. Dolby's street, if you know what I mean. To confirm this possibility, I'd like to give out five free copies of my CD to Alloy members, with my best wishes for their musical enjoyment . . . but as usual there is a catch . . . I'll divvy up the five to the individuals who write me an email (sent from the "Contact" link at my website http://www.emeraldsoul.com ) that answers the following questions: In 25 words, more or less, tell me why you think Thomas' music is so good, and how it has affected/improved/changed your life. that's it. Do a little writing, maybe score a free CD of mine. Sound like fun?!? It would be my pleasure to read your response and share my own music with you! Details: You have one week. Don't send any attachments (in light of recent events). And don't use this address to reply to - use the "contact" link as described above. thanks then, ready to have some fun, - -Tom http://www.emeraldsoul.com ------------------------------ End of alloy-digest V8 #136 ***************************