Virus Alert: AVflash 8.51a from AVweb

Be aware, I just received an email purporting to be from AVweb with the
subject "AVflash 8.51a". It had an attachment, "Sim1.fpr.scr", that was
infected with the Bugbear worm. The relevant headers are included below.

General advice:
Be very aware of email-borne worms/viruses and **NEVER** launch an
attachment you're not expecting - and be wary of ones you *are* expecting.
Try to get in the habit of saving attachments to your hard drive before
launching them. That should give your anti-virus software a chance of
catching it. (You *do* run updated anti-virus software, right?)

Be safe.

--
John T
http://tknowlogy.com/tknoFlyer
_______________


quote
Received: from smtp02.mrf.mail.rcn.net ([207.172.4.61])
by smtp-hub2.mrf.mail.rcn.net with esmtp (Exim 3.35 #7)
id 19tZxk-0004ZA-00; Sun, 31 Aug 2003 17:42:20 -0400
Received: from 66-44-60-234.s234.tnt4.lnhva.md.dialup.rcn.com
([66.44.60.234] helo=jcknoll)
by smtp02.mrf.mail.rcn.net with smtp (Exim 3.35 #4)
id 19tZxA-0007PY-00; Sun, 31 Aug 2003 17:41:45 -0400
From:
Subject: AVflash 8.51a
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------3047TK1LQ5MJ7N"
Message-Id:
Bcc:
Date: Sun, 31 Aug 2003 17:41:45 -0400
Return-Path:
X-OriginalArrivalTime: 31 Aug 2003 21:42:49.0800 (UTC)
FILETIME=[D2F7A480:01C37008]

------------3047TK1LQ5MJ7N
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

-----------------------------------------------------------------------
AVflash Vol. 8, Issue 51a Monday, December 16, 2002
-----------------------------------------------------------------------

************************************************** ***************

This issue of AVweb's AVflash is brought to you by GARMIN
International. From takeoff to touchdown, GARMIN is changing
the

------------3047TK1LQ5MJ7N
Content-Type: application/x-msdownload; name="Sim1.fpr.scr"
/quote

On Sun, 31 Aug 2003 22:22:06 GMT, John T wrote:
General advice:
Be very aware of email-borne worms/viruses and **NEVER** launch an
attachment you're not expecting - and be wary of ones you *are* expecting.

On my work network, I bounce any email with Windows executables at
the (non-Windows) MX.
At home, I don't use Windows.

Keeps the email-borne worms away pretty effectively.

--
Dylan Smith, Castletown, Isle of Man
Flying: http://www.dylansmith.net
Frontier Elite Universe: http://www.alioth.net
"Maintain thine airspeed, lest the ground come up and smite thee"