RE: ATM Hi (This is the work of the Beagle worm)

["John Murray" <imasloth@bigpond.com>]

Morning all,
	Regarding this B****dy worm that is zipping around right now. I just
noticed that one is purporting to be from me. However it is using my old
email address which was closed 15 months ago. My current configuration on
this machine has never had the onslow@austarnet address on it therefore this
is zipping from someone else. It's a bit annoying though. Good luck getting
rid of it whoever has it on their machine.
Now back on topic..
	I'm interested in Bob Mays practice of having cooler pitch than I do. When
I've run it cooler I find the stuff sticking to anything and everything and
not flowing as well. Are there any tricks that you do to achieve this bob? I
can't quite visualise what you are saying in the following sentence. "(even
playing with the cold spots to get them to heat faster)"

Cheers

John Murray
Whyalla
South Australia
Check our web page at http://astronomy.sa86net.com ATM and M-O-M stuff.


> -----Original Message-----
> From: owner-atm@shore.net [mailto:owner-atm@shore.net]On Behalf Of
> mdholm@telerama.com
> Sent: Wednesday, 21 January 2004 9:00 AM
> To: atm@shore.net
> Subject: Re: ATM Hi (This is the work of the Beagle worm)
>
>
>
> I went over my computer very thoroughly last night using three
> methods, and did
> not find any evidence of the Beagle worm on it.  Now we have messages
> purporting to be from me and from Richard Schwartz but in fact
> both coming from
> the Beagle worm.
>
> It seems likely that someone on the ATM list does have an
> infected computer.
> It will be a Windows machine, because that is Beagle's
> environment.  You can
> download a free, fairly small and fast program that checks for
> and removes
> Beagle from
> http://www.symantec.com/avcenter/venc/data/w32.beagle.a@mm.removal
.tool.html


There are also manual ways to check for Beagle.  They are documented at
http://www.symantec.com/avcenter/venc/data/w32.beagle.a@mm.html

Symantec reports that some users have reported simultanious infection with
Trojan.Mitglieder.C  This little jewel opens an email relay on your machine
that spammers can use to hide their tracks by sending spam through your
machine.

Information on this one is at
http://securityresponse.symantec.com/avcenter/venc/data/trojan.mitglieder.c.
html

Mark Holm
mdholm@telerama.com