Date: Thu, 18 Mar 2004 16:16:44 -0500 (EST) From: BCPL.NET SysAdmin To: BCPL.NET News Subject: BCPL.NET NEWS: Bagle Worm Reminder ------------------- BAGLE WORM REMINDER ------------------- In BCPL.NET NEWS dated March 3, 2004 I described a virus called the "Bagle.J Worm", a.k.a. the "Beagle.J Worm". In spite of that alert large numbers of PCs belonging to BCPL.NET customers continue to become infected by the Bagle Worm, hence this reminder. In that March 3rd alert I explained that Bagle.J sends out infected e-mail masquerading as e-mail from official-looking "spoofed" BCPL.NET addresses like "management@bcpl.net", "administration@bcpl.net", "staff@bcpl.net", "noreply@bcpl.net" and "support@bcpl.net". Several new versions of Bagle have appeared since then, the latest being Bagle.P. In addition to the spoofed addresses listed above, the new versions also send e-mail as if from "antivirus@bcpl.net" and "antispam@bcpl.net". THE ADDRESSES LISTED ABOVE ARE NOT LEGITIMATE BCPL.NET STAFF ADDRESSES. OFFICIAL E-MAIL FROM BCPL.NET STAFF IS SENT ONLY FROM THE FOLLOWING FIVE ADDRESSES: abuse@bcpl.net accounts@bcpl.net dnsadmin@bcpl.net help@bcpl.net ispadmin@bcpl.net Official-looking e-mail from any other address ending with "@bcpl.net" is not legitimate. It is not from BCPL.NET staff. It may contain a virus. Furthermore, official e-mail from BCPL.NET staff never includes file attachments. Official-looking e-mail with a file attachment that appears to be from BCPL.NET staff is not legitimate. It is not really from BCPL.NET staff. It may contain a virus. Do not open the file attachment! If you missed my March 3rd BCPL.NET News message about the Bagle Worm, you'll find it archived on our Web site at http://www.bcpl.net/news/ . -- BCPL.NET INTERNET SERVICES 320 York Road Towson, MD 21204-5179 U.S.A. Web Site: http://www.bcpl.net Who To Contact For What: http://www.bcpl.net/contacts/