As I understand it, Bugbear takes two addresses from the infected users contact list and melds the name of one with the domain of another, then uses this Frankenstein address as the supposed source of the infected mails it the sends. So, for instance, if you were infected when the only 2 addresses in your contacts list were 'mso@xxxxxxxxxxxxx' and 'ray@xxxxxxxxx', Bugbear would go whizzing out of your outbox bearing a from address of either 'mso@xxxxxxxxx' or 'ray@xxxxxxxxxxxxx'. Neither of these addresses is real and neither 'mso' nor 'ray' are the sender. For the real sender's name to appear in the from field, he would have to have put himself and his own email address in his contacts list, and even then it's a random selection from all contacts. This being the case, the person names in the 'from' field is very unlikely indeed to be the sender of your virus email; his only crime is to be in the address book of the sender. As such, he's probably received the same virus attack you have, from the same person at the same time. _____________ This email is from Ray Blake, Head of Software Design, GR Business Process Solutions. It is confidential and intended for the addressee only. The contents are private and may be legally privileged. If you receive this email in error we would be grateful if you would advise the sender and delete the email from your system. For more information on the services that we offer please visit us at our website: - www.grbps.com -----Original Message----- From: mso-bounce@xxxxxxxxxxxxx [mailto:mso-bounce@xxxxxxxxxxxxx] On Behalf Of Dian Chapman Sent: 15 August 2003 04:03 To: mso@xxxxxxxxxxxxx Subject: [mso] Re: bugbear virus just got sent HA! Brett...innocent? I think NOT!<smirk> Yes, I know Brett and yes, it could be a spoof, but I'm blind copying him into this email so he'll know that somewhere something is wrong and viruses have his name attached. (Oh Brett...read below, luv. Hope all's well over there...stay cool!) Good luck getting outta town, Linda! They SAY things should be fixed by the AM...but that'll, obviously mean a big backlog of flights. Dian Chapman Technical Consultant & Microsoft MVP Free Word Tips & Tricks eBook: http://www.mousetrax.com/books.html Free Tutorial site: http://www.mousetrax.com/techpage.html Free Support Ezine: http://www.mousetrax.com/techtrax/ -----Original Message----- From: mso-bounce@xxxxxxxxxxxxx [mailto:mso-bounce@xxxxxxxxxxxxx] On Behalf Of Linda Johnson Sent: Thursday, August 14, 2003 8:12 PM To: mso@xxxxxxxxxxxxx Subject: [mso] Re: bugbear virus just got sent Lexi...please remember how worms work and be careful when you accuse a member of sending one...very often worm viruses are not coming from whom they appear to be coming from.....if you don't understand that, please read this....Brett could be perfectly innocent here...and, by the way, I did NOT receive it Read this so you understand how these things work in the future: http://personal-computer-tutor.com/abc2/v18/linda18.htm I'm supposed to go to Canada in the morning but the Toronto airport is closed becuz of the blackout so I may not get out of here....and I'm VERY depressed :-( Linda Publisher ~ ABC ~ All 'Bout Computers Owner ~ Linda's Computer Stop http://personal-computer-tutor.com FREE MS Office eBook Tutorial http://personal-computer-tutor.com/library.htm -----Original Message----- From: mso-bounce@xxxxxxxxxxxxx [mailto:mso-bounce@xxxxxxxxxxxxx] On Behalf Of Lexi Sent: Thursday, August 14, 2003 8:38 PM To: mso@xxxxxxxxxxxxx Subject: [mso] Re: bugbear virus just got sent Anyone know a brett collins...an email with that name just came through infected with the bugbear virus Obviously we don't get attachments here but the person was replying to an access question so it must have come in to this list Or on the heels of a message send to this list lexi ************************************************************* You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx or MicrosoftOffice@xxxxxxxxxxxxxxxx To send mail to the group, simply address it to mso@xxxxxxxxxxxxx To Unsubscribe from this group, send an email to mso-request@xxxxxxxxxxxxx with the word "unsubscribe" (without the quotes) in the subject line. Or, visit the group's homepage and use the dropdown menu. This will also allow you to change your email settings to digest or vacation (no mail). //www.freelists.org/webpage/mso To be able to use the files section for sharing files with the group, send a request to mso-moderators@xxxxxxxxxxxxx and you will be sent an invitation with instructions. Once you are a member of the files group, you can go here to upload/download files: http://www.smartgroups.com/vault/msofiles ************************************************************* ************************************************************* You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx or MicrosoftOffice@xxxxxxxxxxxxxxxx To send mail to the group, simply address it to mso@xxxxxxxxxxxxx To Unsubscribe from this group, send an email to mso-request@xxxxxxxxxxxxx with the word "unsubscribe" (without the quotes) in the subject line. Or, visit the group's homepage and use the dropdown menu. This will also allow you to change your email settings to digest or vacation (no mail). //www.freelists.org/webpage/mso To be able to use the files section for sharing files with the group, send a request to mso-moderators@xxxxxxxxxxxxx and you will be sent an invitation with instructions. Once you are a member of the files group, you can go here to upload/download files: http://www.smartgroups.com/vault/msofiles ************************************************************* ************************************************************* You are receiving this mail because you subscribed to mso@xxxxxxxxxxxxx or MicrosoftOffice@xxxxxxxxxxxxxxxx To send mail to the group, simply address it to mso@xxxxxxxxxxxxx To Unsubscribe from this group, send an email to mso-request@xxxxxxxxxxxxx with the word "unsubscribe" (without the quotes) in the subject line. Or, visit the group's homepage and use the dropdown menu. This will also allow you to change your email settings to digest or vacation (no mail). //www.freelists.org/webpage/mso To be able to use the files section for sharing files with the group, send a request to mso-moderators@xxxxxxxxxxxxx and you will be sent an invitation with instructions. Once you are a member of the files group, you can go here to upload/download files: http://www.smartgroups.com/vault/msofiles *************************************************************