Re: Price.cpl / bagel worm

[Matt Haas <mhaas@xxxxxxx>]

John,

It's most likely a spoofed from address (which is why I ignored your 
earlier email). Before I left for Power Tour in 2003, I also got flooded 
with emails from me that couldn't have happened since my PC was turned off 
when they were generated at my mattsoldcars email address routinely gets 
crap that was supposedly generated by that same email address (again, when 
my PC is off).

I've run several system scans since Norton's came out with the definitions 
for this one in particular and nothing's been found. Also, I still have 
dial up so unless you see them around the time this email goes out, it 
isn't me.

Matt

At 01:51 PM 1/4/2005 -0500, you wrote:
> Matt I've been getting a steady email from you the last few days. It
> contains price.cpl it's the latest Bagle worm here is a link to see the
> details.
>
> http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_BAGLE.A
> T
>
> I'm sending to the list as I've emailed you a few days ago and am concerned
> you didn't receive it. Shouldn't be too tough to get rid of. Trend has the
> damage probability as high for anyone becoming infected:
>
> High
> - system becomes unusable (i.e. flash bios, format HDD)
> - system data or files are unrecoverable (i.e. encryption of data)
> - system cannot be automatically recovered using tools
> - recovery requires restoring from backup
> - Causes large amounts of network traffic (packet flooders, mass mailers)
> - Data/files are sent to a third party
>
>
> ~John

mhaas@xxxxxxx
Cincinnati, OH
http://www.mattsoldcars.com
1966 Rambler Rebel
1968 Rambler American sedan
===============================================================
According to a February survey of Internet holdouts released by
UCLA's Center for Communication Policy, people cite
not having a computer as the No. 1 reason they won't go online.