to the list, sorry to be off topic: Traceroute which I've not used much came back with two URL addresses:
207.2.90.2 61.8.3.163 both in Austrailia, they seem to be mail forwarding services. The return email was: [EMAIL PROTECTED] . The virus was not detected on my PC at work, but then it's old. I've deleted it from my work PC, just in case. Thanks to all the listers who have dug into this. Walt in Washington >I too received it. Interesting. I almost wonder if it entered through LEM >or else one of the list members who is using a pc. > >Here is the Symantec review of the virus. Of course, Mac's are not >affected. :) > >http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] > > Dave > >> NOTE: Due to a decreased rate of submissions, Symantec Security Response has >> downgraded this threat from a Category 4 to a Category 3 as of January 15, >> 2003. >>> >> [EMAIL PROTECTED] is a mass-mailing worm. It can also spread through network >> shares. It has keystroke-logging and backdoor capabilities. The worm also >> attempts to terminate the processes of various antivirus and firewall >> programs. >> >> Because the worm does not properly handle the network resource types, it may >> flood shared printer resources, which causes them to print garbage >>or disrupt >> their normal functionality. >> >> It is written in the Microsoft Visual C++ 6 programming language and is >> compressed with UPX v0.76.1-1.22. >> >> >> Also Known As: W32/Bugbear-A [Sophos], WORM_BUGBEAR.A [Trend], Win32.Bugbear >> [CA], W32/[EMAIL PROTECTED] [McAfee], I-Worm.Tanatos [AVP], W32/Bugbear [Panda], >> Tanatos [F-Secure] >> Type: Worm >> Infection Length: 50,688 bytes >> Systems Affected: Windows 95, Windows 98, Windows NT, Windows 2000, Windows >> XP, Windows Me >> Systems Not Affected: Macintosh, UNIX, Linux >> CVE References: CVE-2001-0154 > > > More...much more. -- SuperMacs is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | Service & Replacement Parts [EMAIL PROTECTED] | & CDRWs on Sale! | Support Low End Mac <http://lowendmac.com/lists/support.html> SuperMacs list info: <http://lowendmac.com/supermacs/list.shtml> --> AOL users, remove "mailto:"; Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive: <http://www.mail-archive.com/supermacs%40mail.maclaunch.com/> --------------------------------------------------------------- >The Think Different Store http://www.ThinkDifferentStore.com ---------------------------------------------------------------
