🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: sci.electronics.repair
Article #1021

Re: REAL VIRUS ALERT

#1021
From: Droid Man
Date: Fri, 26 Apr 2002 07:43
107 lines
5491 bytes
On Fri, 26 Apr 2002 03:11:58 GMT, tmacinty@ns.sympatico.ca (Tom
MacIntyre) wrote:

>On Fri, 26 Apr 2002 02:38:26 GMT, Droid Man <me@me.com> wrote:
>
>>On Thu, 25 Apr 2002 22:37:58 GMT, tmacinty@ns.sympatico.ca (Tom
>>MacIntyre) wrote:
>>
>>>On Thu, 25 Apr 2002 22:05:47 GMT, Droid Man <me@me.com> wrote:
>>>
>>>>Yes you win, three threads about the same thing and a list of people
>>>>who don't patch their software as per Microsoft recommendations.
>>>>
>>>>If you want protection for MS mail products go to
>>>>http://office.microsoft.com/downloads/9798/Out98sec.aspx
>>>>
>>>>Be aware when you put this update on, you cannot email exe files. They
>>>>have to be renamed or zipped.
>>>
>>>I don't use MS mail products, and I received several of these in the
>>>last two days. I know of other cases similar to mine as well.
>>>
>>>Tom
>>>
>>>>
>>
>>And your browser is from? MS?
>>Your OS is from ? MS?
>
>I received the messages using Eudora, and my AV software immediately
>flagged it as it landed. Is there an OS patch that would've prevented
>this from happening?
>
>Tom
>
Nothing happened in your case. It is debatable if it would have
affected Eudora. I would imagine HTML preview would havebeen fatal.

Your are in the minority. If you check the headers of the other
posters, you will see they are mainly MS products.

Are you arguing people should not patch against well known exploits?

>>
>>You need to read and patch . Security should be proactive.
>>
>>
>>>>On Thu, 25 Apr 2002 09:53:23 +1000, Don McKenzie <don@dontronics.com>
>>>>wrote:
>>>>
>>>>>Bob Parker wrote:
>>>>>> 
>>>>>> Hi,
>>>>>>    I case it's not clear to everyone, this "Klez" worm covers its
>>>>>> tracks by taking a random e-mail address from the address book in the
>>>>>> machine it's infected, and putting that random address into the "From"
>>>>>> line of the infected e-mails it sends out to others in the same
>>>>>> address book.
>>>>>>    This means that when you receive it, it did *not* come from the
>>>>>> computer shown in the "From" line. So don't contact that person and
>>>>>> abuse them. :-)
>>>>>>    If that doesn't make sense it's because I'm half asleep. Don
>>>>>> McKenzie has written a much clearer explanation and put it on his
>>>>>> website. See http://www.dontronics.com/virus.html
>>>>>> 
>>>>>> Cheers,
>>>>>> Bob
>>>>>
>>>>>Thanks Bob,
>>>>>Re http://www.dontronics.com/virus.html
>>>>>I added this text to the page today:
>>>>>
>>>>>+++++++++++++++++++++++++++++++++++
>>>>>Hi Don, 
>>>>>I know what you mean. I receive email virus sent from myself [to
>>>>>myself]. 
>>>>>Too bad these programmers have nothing better to do with their time. I 
>>>>>would bet if they chose to, they could actually be doing something
>>>>>useful. 
>>>>>Regards, 
>>>>>-Bruce 
>>>>>http://rentron.com/ 
>>>>>Reynolds Electronics 
>>>>>+++++++++++++++++++++++++++++++++++
>>>>>Don, my thanks to you for the postings. For some reason, for the past
>>>>>week, I have been receiving a rash of viruses via e-mail attachments -
>>>>>one was the W32/Sir.Cam worm coming in every half hour from the same
>>>>>address - a hotel in Quebec [???].
>>>>>
>>>>>Turns out this particular address was a real place, and not a
>>>>>pseudo-address. I called and notified them, and I am no longer
>>>>>receiving the every 1/2-hour e-mails. I assume they removed my address
>>>>>from their system. Whatever, the magic seems to have worked [at least
>>>>>for now].
>>>>>- dan michaels
>>>>>www.oricomtech.com
>>>>>+++++++++++++++++++++++++++++++++++
>>>>>
>>>>>Am I starting to win?
>>>>>Cheers Don...
>>>>>
>>>>>Don McKenzie    mailto:don@dontronics.com     http://www.dontronics.com
>>>>>
>>>>>Add USB to your Product in 10 min.  http://www.dontronics.com/giga.html
>>>>>The World's Largest Range of Atmel/AVR & PICmicro Hardware and Software
>>>>
>>
Technical Details
Message-ID: <qt0icusu9h1486phb8u3o16ju3eopueq61@4ax.com>
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!intgwpad.nntp.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mail
References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com> <3cc8c5bf.13807471@news.wolf>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: fd6dd,9b755c521d8d6d4b
X-Google-Attributes: gidfd6dd,public
X-Google-Thread: f849b,9b755c521d8d6d4b
X-Google-Attributes: gidf849b,public
X-Google-Thread: 103407,f5b7f625e2259098
X-Google-Attributes: gid103407,public
X-Google-Thread: 1131b0,f9a038d13c891748
X-Google-Attributes: gid1131b0,public
X-Google-ArrivalTime: 2002-04-26 00:43:27 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!intgwpad.nntp.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mail
From: Droid Man <me@me.com>
Newsgroups: sci.electronics.repair,aus.electronics,comp.robotics.misc,comp.arch.embedded
Subject: Re: REAL VIRUS ALERT
Message-ID: <qt0icusu9h1486phb8u3o16ju3eopueq61@4ax.com>
References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com> <3cc8c5bf.13807471@news.wolf>
X-Newsreader: Forte Agent 1.91/32.564
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 108
Date: Fri, 26 Apr 2002 07:43:25 GMT
NNTP-Posting-Host: 144.136.133.248
X-Complaints-To: news@bigpond.net.au
X-Trace: news-server.bigpond.net.au 1019807005 144.136.133.248 (Fri, 26 Apr 2002 17:43:25 EST)
NNTP-Posting-Date: Fri, 26 Apr 2002 17:43:25 EST
Organization: BigPond Internet Services (http://www.bigpond.net.au)