Paul Edwards ([log in to unmask]) wrote:
: I just received an email with a virus that NAV caught and quarantined.
: The address list has a lot of HP3000-L names on it. The headers are
: listed below. Watch out!!
:

The email was probably from a PC infected with the Gibe.B worm:

   http://www.f-secure.com/v-descs/gibe_b.shtml
   F-Secure Computer Virus Information Pages: Gibe.B

  "NAME:  Gibe.B
   ALIAS: I-Worm.Gibe.B, Gibe_B

   Gibe.b worm first appeared on 24th of February 2003. Is started to
   spread actively on 25th of February. The worm spreads itself via
   e-mail, IRC, local network and P2P (peer-to-peer) networks. The worm
   pretends to be an update from Microsoft when it spreads via e-mail.

   [snip]

   The worm locates e-mail addresses by searching inside MailViews.db
   file and Windows Address Book file. Also the worm tries to look for
   e-mails in newsgroups. It reads newsgroup messages and gets sender's
   e-mail addresses from them..."

Microsoft NEVER sends software via email:

   http://www.microsoft.com/technet/security/policy/swdist.asp
   Microsoft Policies on Software Distribution

  "...Microsoft never distributes software directly via e-mail..."


--Jerry Leslie   (my opinions are strictly my own)
  Note: [log in to unmask] is invalid for email

* To join/leave the list, search archives, change list settings, *
* etc., please visit http://raven.utc.edu/archives/hp3000-l.html *