Article View: sci.electronics.repair
Article #1020Re: REAL VIRUS ALERT
From: Tom MacIntyre
Date: Fri, 26 Apr 2002 03:11
Date: Fri, 26 Apr 2002 03:11
96 lines
4764 bytes
4764 bytes
On Fri, 26 Apr 2002 02:38:26 GMT, Droid Man <me@me.com> wrote: >On Thu, 25 Apr 2002 22:37:58 GMT, tmacinty@ns.sympatico.ca (Tom >MacIntyre) wrote: > >>On Thu, 25 Apr 2002 22:05:47 GMT, Droid Man <me@me.com> wrote: >> >>>Yes you win, three threads about the same thing and a list of people >>>who don't patch their software as per Microsoft recommendations. >>> >>>If you want protection for MS mail products go to >>>http://office.microsoft.com/downloads/9798/Out98sec.aspx >>> >>>Be aware when you put this update on, you cannot email exe files. They >>>have to be renamed or zipped. >> >>I don't use MS mail products, and I received several of these in the >>last two days. I know of other cases similar to mine as well. >> >>Tom >> >>> > >And your browser is from? MS? >Your OS is from ? MS? I received the messages using Eudora, and my AV software immediately flagged it as it landed. Is there an OS patch that would've prevented this from happening? Tom > >You need to read and patch . Security should be proactive. > > >>>On Thu, 25 Apr 2002 09:53:23 +1000, Don McKenzie <don@dontronics.com> >>>wrote: >>> >>>>Bob Parker wrote: >>>>> >>>>> Hi, >>>>> I case it's not clear to everyone, this "Klez" worm covers its >>>>> tracks by taking a random e-mail address from the address book in the >>>>> machine it's infected, and putting that random address into the "From" >>>>> line of the infected e-mails it sends out to others in the same >>>>> address book. >>>>> This means that when you receive it, it did *not* come from the >>>>> computer shown in the "From" line. So don't contact that person and >>>>> abuse them. :-) >>>>> If that doesn't make sense it's because I'm half asleep. Don >>>>> McKenzie has written a much clearer explanation and put it on his >>>>> website. See http://www.dontronics.com/virus.html >>>>> >>>>> Cheers, >>>>> Bob >>>> >>>>Thanks Bob, >>>>Re http://www.dontronics.com/virus.html >>>>I added this text to the page today: >>>> >>>>+++++++++++++++++++++++++++++++++++ >>>>Hi Don, >>>>I know what you mean. I receive email virus sent from myself [to >>>>myself]. >>>>Too bad these programmers have nothing better to do with their time. I >>>>would bet if they chose to, they could actually be doing something >>>>useful. >>>>Regards, >>>>-Bruce >>>>http://rentron.com/ >>>>Reynolds Electronics >>>>+++++++++++++++++++++++++++++++++++ >>>>Don, my thanks to you for the postings. For some reason, for the past >>>>week, I have been receiving a rash of viruses via e-mail attachments - >>>>one was the W32/Sir.Cam worm coming in every half hour from the same >>>>address - a hotel in Quebec [???]. >>>> >>>>Turns out this particular address was a real place, and not a >>>>pseudo-address. I called and notified them, and I am no longer >>>>receiving the every 1/2-hour e-mails. I assume they removed my address >>>>from their system. Whatever, the magic seems to have worked [at least >>>>for now]. >>>>- dan michaels >>>>www.oricomtech.com >>>>+++++++++++++++++++++++++++++++++++ >>>> >>>>Am I starting to win? >>>>Cheers Don... >>>> >>>>Don McKenzie mailto:don@dontronics.com http://www.dontronics.com >>>> >>>>Add USB to your Product in 10 min. http://www.dontronics.com/giga.html >>>>The World's Largest Range of Atmel/AVR & PICmicro Hardware and Software >>> >
Technical Details
Message-ID:
<3cc8c5bf.13807471@news.wolf>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!news-nb00s0.nbnet.nb.ca!sapphire.mtt.net!not-for-mailReferences:
<3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: f849b,9b755c521d8d6d4b X-Google-Attributes: gidf849b,public X-Google-Thread: fd6dd,9b755c521d8d6d4b X-Google-Attributes: gidfd6dd,public X-Google-Thread: 1131b0,f9a038d13c891748 X-Google-Attributes: gid1131b0,public X-Google-Thread: 103407,f5b7f625e2259098 X-Google-Attributes: gid103407,public X-Google-ArrivalTime: 2002-04-25 20:12:02 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!cyclone.bc.net!torn!news-nb00s0.nbnet.nb.ca!sapphire.mtt.net!not-for-mail From: tmacinty@ns.sympatico.ca (Tom MacIntyre) Newsgroups: sci.electronics.repair,aus.electronics,comp.robotics.misc,comp.arch.embedded Subject: Re: REAL VIRUS ALERT Message-ID: <3cc8c5bf.13807471@news.wolf> References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com> X-Newsreader: Forte Free Agent 1.21/32.243 Lines: 97 Date: Fri, 26 Apr 2002 03:11:58 GMT NNTP-Posting-Host: 142.177.225.156 X-Complaints-To: abuse@mpoweredpc.net X-Trace: sapphire.mtt.net 1019790718 142.177.225.156 (Fri, 26 Apr 2002 00:11:58 ADT) NNTP-Posting-Date: Fri, 26 Apr 2002 00:11:58 ADT Organization: MPowered-Subscriber