CQ-Contest
[Top] [All Lists]

Re: [CQ-Contest] Vicious CQWW Virus

To: Timo Klimoff <timo.klimoff@dnainternet.net>
Subject: Re: [CQ-Contest] Vicious CQWW Virus
From: Cleve D Leclair <dleclair@efn.org>
Date: Wed, 20 Aug 2003 16:41:26 -0700 (PDT)
List-post: <mailto:cq-contest@contesting.com>
If you suspect a virus and your virus checking software does not see it as
viral, then either your virus definitions are out of date or it is not
viral or lastly, your virus checking program is not setup to see a virus
where this file was, in your email. By the looks of your email address
your email is not an internet based email account, like yahoo or hotmail,
so it should have been caught by the email scanning, if your version of
F-Prot scans email.

The best advice on viruses and virus checking software..."Keep up to
date". Both with the software and the virus updates from the company the
software is from.

Go Symantec and Norton AntiVirus....It has caught every BugBear that has
been emailed to me.



On Wed, 20 Aug 2003, Timo Klimoff wrote:

>
> > I recently received email from somebody identified as "DXCC Robot" and
> > containing a very suspicious looking attachment.  The actual email address
> > was unreplyable@mail.ru.  The message body began as follows:
> >
> > "Thank you for your participation in the CQ WW contest. Your electronic
> log
> > submission is appreciated.  Unfortunately, our robot was unable to process
> > your Cabrillo log file
> > as submitted because it appears to be missing some critical information.
> > Below you will find a list of the problems that were encountered in
> > attempting to process your log, as well as a
> > corresponding set of remedies..."
> >
> > Then followed the attachment, which was named "All-bdxcc.xls.scr".
>
> This looks like Bugbear - virus.
> (maybe Bugbear.B)
>
> The subject of an infected message is taken from random files on an infected
> computer and the body of an infected message can be empty or it can contain
> a text from a random file.
>
> http://www.f-secure.fi/v-descs/bugbear_b.shtml
>
> I presume that everyone has noticed wildly spreading Sobig.F and remember:
> the sender information of these mails is wrong and doesn't indicate the real
> infected user.
>
> 73, Timo OH1NOA
>
> ObContest:
> Scandinavian Activity Contest 20.-21.9.2003 CW 1200-1200z
> Scandinavian Acitivity Contest 27.-28.9.2003 SSB 1200-1200z
>
> ---------------------------------------------------------------
>     The world's top contesters battle it out in Finland!
> THE OFFICIAL FILM of WRTC 2002 now on professional DVD and VHS!
>        http://home1.pacific.net.sg/~jamesb/
> ---------------------------------------------------------------
>
> _______________________________________________
> CQ-Contest mailing list
> CQ-Contest@contesting.com
> http://lists.contesting.com/mailman/listinfo/cq-contest
>
>
---------------------------------------------------------------
    The world's top contesters battle it out in Finland!
THE OFFICIAL FILM of WRTC 2002 now on professional DVD and VHS!
       http://home1.pacific.net.sg/~jamesb/
---------------------------------------------------------------

_______________________________________________
CQ-Contest mailing list
CQ-Contest@contesting.com
http://lists.contesting.com/mailman/listinfo/cq-contest

<Prev in Thread] Current Thread [Next in Thread>