VIRUS WARNING SUBJECT: [ltp] Administration

Bill Mair linux-thinkpad@linux-thinkpad.org
Fri, 08 Nov 2002 11:14:47 +0100


A BOGUS MAIL WITH A VIRUS WAS SENT TO THE LIST YESTERDAY !!!!

Subject: [ltp] Administration

The mail contains a virus infected attachment called README.EXE and
is hidden with the mime type audio/x-wav.

The virus is known as PE_BRID.A, THE KLEZ VIRUS or W32.Brid.A, just
DELETE it.

See the following symantec page for details:

http://securityresponse.symantec.com/avcenter/venc/data/w32.brid.a@mm.html


And someone in the University of Puertorico is responsible for
maliciously sending this mail to the list ! Not from an infected
computer, but with the intent of infecting as many computers as
possible.

Thank god, I use Linux.

To counter this behaviour in the future, I have set the mail size limit
to 20k for all future postings.

If you have windows, and have double clicked on the readme.exe then you
are most probably infected.

I am not sure about the M$ Outlook thing, maybe it executes attachments
that are audio/x-wav auto-magically ?

I am currently in discussion with the sysadmin for the mail list server,
we will figure something out..

Sorry for any inconvieniance that this may cause, but nobody has a
perfect protection against hackers, and sending a virus infected to a
mailing list is really the lowest of the low.

Bill