I'm not a big fan of off-topic posts or virus warnings, but knowledge is 
empowerment.  Therefore, I will digress from our normal Beloit discourse to 
post a link to a Trend Micro page describing how the latest variant of the 
BAGLE/Beagle virus works.  

The only really new thing about these viruses is how effectively they con - 
"social engineer" - their recipients into opening and executing them.  If you 
don't understand or have little background on this subject, please take the 
time to read through the "technical details" on this page: 

http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=PE_BAGLE.Q&VSect=T 

OR 

http://tinyurl.com/2owwk 

You will note that Bagle disables any running anti-virus and firewall program, 
and avoids sending itself to certain email addresses. The virus itself contains 
a mail (SMTP) component to propogate itself. The virus appears to come from a 
trusted source. The attachment is an encrypted archive. 

Virus myths and things to note:  

* 1 * Viruses do NOT always come from strangers! Often viruses appear to come 
from a known, trusted source - from a friend or, in the case above, your email 
provider. 

* 2 * Viruses commonly disable anti-virus software and firewalls! This makes it 
very difficult to install anti-virus software on an already infected machine. 

* 3 * USE GOOGLE or some other trusted search engine when you get suspicious 
(about anything)!  Don't open it unless you SEARCH on it FIRST!  Take a phrase 
from the suspect and put it into Google.  The results are immediately clear. 

Example subject from above page - "from e-mail technical support" - gives you 
unambiguous results that look like this:  

http://www.google.com/search?&q=%22from+e-mail+technical+support%22 

* 4 * Just because you have an up-to-date antivirus, do NOT be lulled into a 
false sense of security! Despite their best efforts, there is potential for 
vulnerablity in the time that passes between when a new exploit/virus is 
released/found and when anti-virus filters are updated to deal with it. During 
this time you are at risk. Like the Homeland Security folks tell us:  BE SMART, 
BE VIGILANT, BE SAFE! 

* 5 * Virus infected machines need to have Windows re-installed. Usually this 
is true only if you're looking for the cheap, fast way to solve a virus 
infested PC problem. It is not always necessary. When in doubt, and time and 
money is not an issue, get a second opinion! (Note also that spyware/adware 
infestations should NEVER require a Windows re-install!) 

=========================================================== 

We now return you to your regularly scheduled City of Beloit discussion program. ;-) 



Mark 
-- 
http://www.stateline.net/