From chris@rivers.dra.hmg.gb Fri May 24 01:19:46 1996 Received: from relay.mod.uk (relay.mod.uk [192.5.29.50]) by suburbia.net (8.7.4/Proff-950810) with SMTP id BAA20001 for ; Fri, 24 May 1996 01:19:22 +1000 Received: from hermes.dra.hmg.gb by relay.mod.uk with local SMTP id ; Thu, 23 May 1996 16:19:11 +0100 Received: from wandle.dra.hmg.gb by hermes.dra.hmg.gb (MX V4.1 VAX) with SMTP; Thu, 23 May 1996 16:18:56 GMT Received: from rivers.dra.hmg.gb by wandle.dra.hmg.gb with smtp(Smail3.1.28.1 #64) id m0uMc9r-0007V6C; Thu, 23 May 96 16:18 WET DST Forwarded: Thu, 23 May 1996 09:33:58 +0100 Forwarded: advisories Received: from wandle.dra.hmg.gb by brandywine.dra.hmg.gb with smtp(Smail3.1.28.1 #94) id m0uMIBQ-0002kLC; Wed, 22 May 96 18:58 BST for chris Received: from hermes.dra.hmg.gb by wandle.dra.hmg.gb with smtp(Smail3.1.28.1 #64) id m0uMIBO-0007V9C; Wed, 22 May 96 18:58 WET DST Received: from relay.mod.uk by hermes.dra.hmg.gb (MX V4.1 VAX) with SMTP; Wed, 22 May 1996 18:58:41 GMT Received: from norn.mailbase.ac.uk by relay.mod.uk with Internet SMTP id ; Wed, 22 May 1996 18:57:39 +0100 Received: by norn.mailbase.ac.uk id (8.6.12/ for mailbase.ac.uk); Wed, 22 May 1996 17:41:47 +0100 Received: from oxmail3.ox.ac.uk by norn.mailbase.ac.uk id (8.6.12/ for mailbase.ac.uk) with SMTP; Wed, 22 May 1996 17:41:40 +0100 Received: from sable.ox.ac.uk by oxmail3 with SMTP (PP) with ESMTP; Wed, 22 May 1996 17:40:52 +0100 Received: (from pcl@localhost) by sable.ox.ac.uk (1.6/8.6.12) id RAA19312; Wed, 22 May 1996 17:40:49 +0100 Date: Wed, 22 May 1996 17:40:49 +0100 From: Paul Leyland Message-ID: <199605221640.RAA19312@sable.ox.ac.uk> To: uk-security@mailbase.ac.uk, cert@cert.ja.net Subject: Virus on MacUser cover disk 24 May 96 X-List: uk-security@mailbase.ac.uk X-Unsub: To leave, send text 'leave uk-security' to mailbase@mailbase.ac.uk Reply-To: Paul Leyland Sender: uk-security-request@mailbase.ac.uk Precedence: list Resent-To: best-of-security@suburbia.net Resent-Date: Thu, 23 May 1996 16:18:34 +0100 Resent-Message-ID: <6756.832864714@rivers.dra.hmg.gb> Resent-From: Christopher Samuel -----BEGIN PGP SIGNED MESSAGE----- I'm spreading this information around as widely as I can, given the widespread distribution of the offending CD. Please forward as appropriate. OxCERT have received a warning that there is a Macintosh virus on the covermounted CD-ROM with this fortnight's UK MacUser magazine (the 24th May 96 issue). The virus is MDBF-A and it is in a Director movie called "Blah Blah Blah, It's QTVR" in the QuickTime VR demos -- in a folder called AMXDigital QTVR Folder. We believe that no other files are affected. Please ensure that you do not run this movie. If you think your machine may be infected with a virus you should: a) DON'T PANIC b) Consult your local virus expert for assistance (unless, of course, you are the local expert!) Thanks are due to Tony Brett for first drawing this to our attention, and to Peter Higginbotham for verifying that the virus is present on his copy of the CD-ROM Paul Leyland (OxCERT) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Processed by Mailcrypt 3.4, an Emacs/PGP interface iQCVAwUBMaNDfKNsRd57vOpJAQFvnAQAr4zrHm/4A6i9XusJpkw8MiACJMszJnj5 8WWUrIrgHHfE9GeuIjBgbj7/nmgcm2kpljhQpKoyG1DJhRqa9j/oCsIsZ6eqP3VI OorSqt+wOIyYztQtFWvH6hFWp+tnLksjEEUrd1+m4rpjlybH6vLtPbKQw7ZUylBB vzTux1rDoyk= =Wkoz -----END PGP SIGNATURE-----