Article View: sci.electronics.repair
Article #1021Re: REAL VIRUS ALERT
From: Droid Man
Date: Fri, 26 Apr 2002 07:43
Date: Fri, 26 Apr 2002 07:43
107 lines
5491 bytes
5491 bytes
On Fri, 26 Apr 2002 03:11:58 GMT, tmacinty@ns.sympatico.ca (Tom MacIntyre) wrote: >On Fri, 26 Apr 2002 02:38:26 GMT, Droid Man <me@me.com> wrote: > >>On Thu, 25 Apr 2002 22:37:58 GMT, tmacinty@ns.sympatico.ca (Tom >>MacIntyre) wrote: >> >>>On Thu, 25 Apr 2002 22:05:47 GMT, Droid Man <me@me.com> wrote: >>> >>>>Yes you win, three threads about the same thing and a list of people >>>>who don't patch their software as per Microsoft recommendations. >>>> >>>>If you want protection for MS mail products go to >>>>http://office.microsoft.com/downloads/9798/Out98sec.aspx >>>> >>>>Be aware when you put this update on, you cannot email exe files. They >>>>have to be renamed or zipped. >>> >>>I don't use MS mail products, and I received several of these in the >>>last two days. I know of other cases similar to mine as well. >>> >>>Tom >>> >>>> >> >>And your browser is from? MS? >>Your OS is from ? MS? > >I received the messages using Eudora, and my AV software immediately >flagged it as it landed. Is there an OS patch that would've prevented >this from happening? > >Tom > Nothing happened in your case. It is debatable if it would have affected Eudora. I would imagine HTML preview would havebeen fatal. Your are in the minority. If you check the headers of the other posters, you will see they are mainly MS products. Are you arguing people should not patch against well known exploits? >> >>You need to read and patch . Security should be proactive. >> >> >>>>On Thu, 25 Apr 2002 09:53:23 +1000, Don McKenzie <don@dontronics.com> >>>>wrote: >>>> >>>>>Bob Parker wrote: >>>>>> >>>>>> Hi, >>>>>> I case it's not clear to everyone, this "Klez" worm covers its >>>>>> tracks by taking a random e-mail address from the address book in the >>>>>> machine it's infected, and putting that random address into the "From" >>>>>> line of the infected e-mails it sends out to others in the same >>>>>> address book. >>>>>> This means that when you receive it, it did *not* come from the >>>>>> computer shown in the "From" line. So don't contact that person and >>>>>> abuse them. :-) >>>>>> If that doesn't make sense it's because I'm half asleep. Don >>>>>> McKenzie has written a much clearer explanation and put it on his >>>>>> website. See http://www.dontronics.com/virus.html >>>>>> >>>>>> Cheers, >>>>>> Bob >>>>> >>>>>Thanks Bob, >>>>>Re http://www.dontronics.com/virus.html >>>>>I added this text to the page today: >>>>> >>>>>+++++++++++++++++++++++++++++++++++ >>>>>Hi Don, >>>>>I know what you mean. I receive email virus sent from myself [to >>>>>myself]. >>>>>Too bad these programmers have nothing better to do with their time. I >>>>>would bet if they chose to, they could actually be doing something >>>>>useful. >>>>>Regards, >>>>>-Bruce >>>>>http://rentron.com/ >>>>>Reynolds Electronics >>>>>+++++++++++++++++++++++++++++++++++ >>>>>Don, my thanks to you for the postings. For some reason, for the past >>>>>week, I have been receiving a rash of viruses via e-mail attachments - >>>>>one was the W32/Sir.Cam worm coming in every half hour from the same >>>>>address - a hotel in Quebec [???]. >>>>> >>>>>Turns out this particular address was a real place, and not a >>>>>pseudo-address. I called and notified them, and I am no longer >>>>>receiving the every 1/2-hour e-mails. I assume they removed my address >>>>>from their system. Whatever, the magic seems to have worked [at least >>>>>for now]. >>>>>- dan michaels >>>>>www.oricomtech.com >>>>>+++++++++++++++++++++++++++++++++++ >>>>> >>>>>Am I starting to win? >>>>>Cheers Don... >>>>> >>>>>Don McKenzie mailto:don@dontronics.com http://www.dontronics.com >>>>> >>>>>Add USB to your Product in 10 min. http://www.dontronics.com/giga.html >>>>>The World's Largest Range of Atmel/AVR & PICmicro Hardware and Software >>>> >>
Technical Details
Message-ID:
<qt0icusu9h1486phb8u3o16ju3eopueq61@4ax.com>Path:
arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!intgwpad.nntp.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mailReferences:
<3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com> <3cc8c5bf.13807471@news.wolf>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: fd6dd,9b755c521d8d6d4b X-Google-Attributes: gidfd6dd,public X-Google-Thread: f849b,9b755c521d8d6d4b X-Google-Attributes: gidf849b,public X-Google-Thread: 103407,f5b7f625e2259098 X-Google-Attributes: gid103407,public X-Google-Thread: 1131b0,f9a038d13c891748 X-Google-Attributes: gid1131b0,public X-Google-ArrivalTime: 2002-04-26 00:43:27 PST Path: arc1-ca.pugleaf.net!archiver1.google.com!news1.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!intgwpad.nntp.telstra.net!news.telstra.net!news-server.bigpond.net.au!not-for-mail From: Droid Man <me@me.com> Newsgroups: sci.electronics.repair,aus.electronics,comp.robotics.misc,comp.arch.embedded Subject: Re: REAL VIRUS ALERT Message-ID: <qt0icusu9h1486phb8u3o16ju3eopueq61@4ax.com> References: <3cc6d3a6_1@news.greennet.net> <3cc6dd52.5210429@news.zipworld.com.au> <3CC74573.B8DB014F@dontronics.com> <v9vgcu4bpi5jvr31ecovjnu01qvnm3bql5@4ax.com> <3cc88533.92234596@news.wolf> <jbfhcug7ls49fjrblrkgtcf90lrhs9vin1@4ax.com> <3cc8c5bf.13807471@news.wolf> X-Newsreader: Forte Agent 1.91/32.564 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 108 Date: Fri, 26 Apr 2002 07:43:25 GMT NNTP-Posting-Host: 144.136.133.248 X-Complaints-To: news@bigpond.net.au X-Trace: news-server.bigpond.net.au 1019807005 144.136.133.248 (Fri, 26 Apr 2002 17:43:25 EST) NNTP-Posting-Date: Fri, 26 Apr 2002 17:43:25 EST Organization: BigPond Internet Services (http://www.bigpond.net.au)