Virus Alert: AVflash 8.51a from AVweb

[John T]

Be aware, I just received an email purporting to be from AVweb with the
subject "AVflash 8.51a". It had an attachment, "Sim1.fpr.scr", that was
infected with the Bugbear worm. The relevant headers are included below.

General advice:
Be very aware of email-borne worms/viruses and **NEVER** launch an
attachment you're not expecting - and be wary of ones you *are* expecting.
Try to get in the habit of saving attachments to your hard drive before
launching them. That should give your anti-virus software a chance of
catching it. (You *do* run updated anti-virus software, right?)

Be safe.

--
John T
http://tknowlogy.com/tknoFlyer
_______________


<quote>
Received: from smtp02.mrf.mail.rcn.net ([207.172.4.61])
by smtp-hub2.mrf.mail.rcn.net with esmtp (Exim 3.35 #7)
id 19tZxk-0004ZA-00; Sun, 31 Aug 2003 17:42:20 -0400
Received: from 66-44-60-234.s234.tnt4.lnhva.md.dialup.rcn.com
([66.44.60.234] helo=jcknoll)
by smtp02.mrf.mail.rcn.net with smtp (Exim 3.35 #4)
id 19tZxA-0007PY-00; Sun, 31 Aug 2003 17:41:45 -0400
From:
Subject: AVflash 8.51a
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------3047TK1LQ5MJ7N"
Message-Id: >
Bcc:
Date: Sun, 31 Aug 2003 17:41:45 -0400
Return-Path:
X-OriginalArrivalTime: 31 Aug 2003 21:42:49.0800 (UTC)
FILETIME=[D2F7A480:01C37008]

------------3047TK1LQ5MJ7N
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

-----------------------------------------------------------------------
AVflash Vol. 8, Issue 51a Monday, December 16, 2002
-----------------------------------------------------------------------

************************************************** ***************

This issue of AVweb's AVflash is brought to you by GARMIN
International. From takeoff to touchdown, GARMIN is changing
the

------------3047TK1LQ5MJ7N
Content-Type: application/x-msdownload; name="Sim1.fpr.scr"
</quote>

[Dylan Smith]

On Sun, 31 Aug 2003 22:22:06 GMT, John T > wrote:
>General advice:
>Be very aware of email-borne worms/viruses and **NEVER** launch an
>attachment you're not expecting - and be wary of ones you *are* expecting.

On my work network, I bounce any email with Windows executables at
the (non-Windows) MX.
At home, I don't use Windows.

Keeps the email-borne worms away pretty effectively.

--
Dylan Smith, Castletown, Isle of Man
Flying: http://www.dylansmith.net
Frontier Elite Universe: http://www.alioth.net
"Maintain thine airspeed, lest the ground come up and smite thee"

[Roger Halstead]

On Sun, 31 Aug 2003 23:14:04 GMT, Newps > wrote:

>It's very easy. Avflash does not send attachments.

Pratice "Safe Computing" Use a Keyboard condom.

In an industrial environment we used to use form fitting (molded)
latex keyboard covers.

Roger Halstead (K8RI EN73 & ARRL Life Member)
www.rogerhalstead.com
N833R World's oldest Debonair? (S# CD-2)
>
>John T wrote:
>> Be aware, I just received an email purporting to be from AVweb with the
>> subject "AVflash 8.51a". It had an attachment, "Sim1.fpr.scr", that was
>> infected with the Bugbear worm. The relevant headers are included below.
>>
>> General advice:
>> Be very aware of email-borne worms/viruses and **NEVER** launch an
>> attachment you're not expecting - and be wary of ones you *are* expecting.
>> Try to get in the habit of saving attachments to your hard drive before
>> launching them. That should give your anti-virus software a chance of
>> catching it. (You *do* run updated anti-virus software, right?)
>>
>> Be safe.
>>