🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.electronics.repair
Article #1020

Re: REAL VIRUS ALERT

#1020
From: Tom MacIntyre
Date: Fri, 26 Apr 2002 03:11
96 lines
4764 bytes
On Fri, 26 Apr 2002 02:38:26 GMT, Droid Man <me@me.com> wrote:

>On Thu, 25 Apr 2002 22:37:58 GMT, tmacinty@ns.sympatico.ca (Tom
>MacIntyre) wrote:
>
>>On Thu, 25 Apr 2002 22:05:47 GMT, Droid Man <me@me.com> wrote:
>>
>>>Yes you win, three threads about the same thing and a list of people
>>>who don't patch their software as per Microsoft recommendations.
>>>
>>>If you want protection for MS mail products go to
>>>http://office.microsoft.com/downloads/9798/Out98sec.aspx
>>>
>>>Be aware when you put this update on, you cannot email exe files. They
>>>have to be renamed or zipped.
>>
>>I don't use MS mail products, and I received several of these in the
>>last two days. I know of other cases similar to mine as well.
>>
>>Tom
>>
>>>
>
>And your browser is from? MS?
>Your OS is from ? MS?

I received the messages using Eudora, and my AV software immediately
flagged it as it landed. Is there an OS patch that would've prevented
this from happening?

Tom

>
>You need to read and patch . Security should be proactive.
>
>
>>>On Thu, 25 Apr 2002 09:53:23 +1000, Don McKenzie <don@dontronics.com>
>>>wrote:
>>>
>>>>Bob Parker wrote:
>>>>> 
>>>>> Hi,
>>>>>    I case it's not clear to everyone, this "Klez" worm covers its
>>>>> tracks by taking a random e-mail address from the address book in the
>>>>> machine it's infected, and putting that random address into the "From"
>>>>> line of the infected e-mails it sends out to others in the same
>>>>> address book.
>>>>>    This means that when you receive it, it did *not* come from the
>>>>> computer shown in the "From" line. So don't contact that person and
>>>>> abuse them. :-)
>>>>>    If that doesn't make sense it's because I'm half asleep. Don
>>>>> McKenzie has written a much clearer explanation and put it on his
>>>>> website. See http://www.dontronics.com/virus.html
>>>>> 
>>>>> Cheers,
>>>>> Bob
>>>>
>>>>Thanks Bob,
>>>>Re http://www.dontronics.com/virus.html
>>>>I added this text to the page today:
>>>>
>>>>+++++++++++++++++++++++++++++++++++
>>>>Hi Don, 
>>>>I know what you mean. I receive email virus sent from myself [to
>>>>myself]. 
>>>>Too bad these programmers have nothing better to do with their time. I 
>>>>would bet if they chose to, they could actually be doing something
>>>>useful. 
>>>>Regards, 
>>>>-Bruce 
>>>>http://rentron.com/ 
>>>>Reynolds Electronics 
>>>>+++++++++++++++++++++++++++++++++++
>>>>Don, my thanks to you for the postings. For some reason, for the past
>>>>week, I have been receiving a rash of viruses via e-mail attachments -
>>>>one was the W32/Sir.Cam worm coming in every half hour from the same
>>>>address - a hotel in Quebec [???].
>>>>
>>>>Turns out this particular address was a real place, and not a
>>>>pseudo-address. I called and notified them, and I am no longer
>>>>receiving the every 1/2-hour e-mails. I assume they removed my address
>>>>from their system. Whatever, the magic seems to have worked [at least
>>>>for now].
>>>>- dan michaels
>>>>www.oricomtech.com
>>>>+++++++++++++++++++++++++++++++++++
>>>>
>>>>Am I starting to win?
>>>>Cheers Don...
>>>>
>>>>Don McKenzie    mailto:don@dontronics.com     http://www.dontronics.com
>>>>
>>>>Add USB to your Product in 10 min.  http://www.dontronics.com/giga.html
>>>>The World's Largest Range of Atmel/AVR & PICmicro Hardware and Software
>>>
>
Technical Details
Message-ID: <3cc8c5bf.13807471@news.wolf>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!news-nb00s0.nbnet.nb.ca!sapphire.mtt.net!not-for-mail
References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f849b,9b755c521d8d6d4b
X-Google-Attributes: gidf849b,public
X-Google-Thread: fd6dd,9b755c521d8d6d4b
X-Google-Attributes: gidfd6dd,public
X-Google-Thread: 1131b0,f9a038d13c891748
X-Google-Attributes: gid1131b0,public
X-Google-Thread: 103407,f5b7f625e2259098
X-Google-Attributes: gid103407,public
X-Google-ArrivalTime: 2002-04-25 20:12:02 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!news-nb00s0.nbnet.nb.ca!sapphire.mtt.net!not-for-mail
From: tmacinty@ns.sympatico.ca (Tom MacIntyre)
Newsgroups: sci.electronics.repair,aus.electronics,comp.robotics.misc,comp.arch.embedded
Subject: Re: REAL VIRUS ALERT
Message-ID: <3cc8c5bf.13807471@news.wolf>
References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com>
X-Newsreader: Forte Free Agent 1.21/32.243
Lines: 97
Date: Fri, 26 Apr 2002 03:11:58 GMT
NNTP-Posting-Host: 142.177.225.156
X-Complaints-To: abuse@mpoweredpc.net
X-Trace: sapphire.mtt.net 1019790718 142.177.225.156 (Fri, 26 Apr 2002 00:11:58 ADT)
NNTP-Posting-Date: Fri, 26 Apr 2002 00:11:58 ADT
Organization: MPowered-Subscriber