Searching \ for ' Virus warning' in subject line. ()
Make payments with PayPal - it's fast, free and secure! Help us get a faster server
FAQ page: www.piclist.com/techref/index.htm?key=virus+warning
Search entire site for: 'Virus warning'.

No exact or substring matches. trying for part
PICList Thread
'fw : virus warning !!!!!'
1997\05\23@084952 by Eric Martens

flavicon
face
I recieved this email from a friend on another mailing list
read this carefully

Greetings Eric Martens



***************************
*  Eric Martens           *
*  spam_OUTemarTakeThisOuTspamknoware.nl  *
**************************

----------
{Quote hidden}

Wenn
> >>ein
> >>PC infiziert ist, kann folgendes geschehen: Wenn der PC eine Festplatte
> >>hat,
> >>wird diese hoechstwahrscheinlich zerstoert. Wenn das Programm dann
nicht
> >>gestoppt wird, wird der Prozessor des Computers in einen "n-th
> >>complexity
> >>infinite binary loop" gesetzt, was den Prozessor zerstoert, wenn dies
zu
> >>lange laeuft. Um dem sogennanten
> >>"Good Times"-Virus zu entgehen, darf man eMails, die irgendetwas mit
> >>"Good
> >>Times" in der "Betreff"-Zeile stehen haben,  einfach nicht laden!!!
Wird
> >>die
> >>eMail dennoch geladen, initialisiert sich das Programm von selbst in
den
{Quote hidden}

es
{Quote hidden}

translated
> >into English language and distruibuted to as many reciepents as
possible.
{Quote hidden}

1997\05\23@090903 by Goeran Stigler

flavicon
face
Eric Martens wrote:
>I recieved this email from a friend on another mailing list
>read this carefully

Appreciate your concern, but the Good times virus is a well known hoax. The
only damage it does is wasting bandwith and worrying people.

Check      http://www.symantec.com/avcenter/hoax.html


Goeran Stigler                      http://www.pe.chalmers.se/people/ghost/

'fw : virus warning !!!!! (GOOD TIMES :-)'
1997\05\23@091235 by Gerhard Fiedler

picon face
At 14:42 23/05/97 +0200, Eric Martens wrote:
>I recieved this email from a friend on another mailing list
>read this carefully

I haven't understood how downloading an ASCII message could do anything to
my (or other's) systems... Even with those nasty maildat (or other)
attachments :-)


-------------------------------------
Gerhard Fiedler <gerhardspamspam_OUTpobox.com>
S‹o Paulo - Brazil

1997\05\23@095753 by wky

flavicon
face
Oh no, will these idiots posting this bullshit never die ?????????
Once again: 'Good Times' is a hoax !!!!!!!

Wolfgang


On 23 May 97 at 14:42, Eric Martens wrote:

> > >DO NOT OPEN MAIL WHICH CONTAINS THE WORDS
> > >"GOOD TIMES " in the ssubject line.

-----

1997\05\23@100823 by Boglar Gabor

flavicon
face
At 14.42 1997.05.23 +0200, you wrote:
>> >I received this mail and for all English-speakers:
>> >
>> >DO NOT OPEN MAIL WHICH CONTAINS THE WORDS
>> >
>> >"GOOD TIMES " in the ssubject line.
>> >Opening will unpack a destructive VIRUS on your system
>> >same with "DEEYENDA"


1.
No attachment will be unpacked automatically by opening
an email message!

2.
Your message itself is the VIRUS!
What is a virus: it wants to be spread as widely as possible.
So you are the vector (who spreads a virus).

3.
Don't bother with messages like this.
Simply ignore them!

Cheers, Gabor

(Sorry for my poor english)

'sorry Re: [PICS] Fw: Virus Warning'
1997\05\23@142730 by Eric Martens

flavicon
face
Sorry guys (and girls !?!) They fooled me and i bought it, sorry. I should
have read it better and i should know better.


Greetings Eric Martens.

----------
> From: Eric Martens <@spam@emarKILLspamspamknoware.nl>
> To: KILLspampicsKILLspamspamparallaxinc.com
> Subject: [PICS] Fw: Virus Warning
> Date: vrijdag 23 mei 1997 14:39
>
> I received this email from a friend on another mailing list. Read it
> carefully it can save you alot of trouble.
> For those who can't read german there's a english translation at the end
of
> the mail.
>
> Greetings Eric Martens
>
>
>
> ***************************
> *  Eric Martens           *
> *  RemoveMEemarTakeThisOuTspamknoware.nl  *
> **************************

1997\05\23@145455 by Martin McCormick

flavicon
face
       The first time I heard one of those stories, I bought it also and
posted a message to our company Email and looked like a total idiot.  It
happens to the best of us.  It's a pretty good virus.  It runs on the most
powerful computers on Earth.

Martin McCormick

In message <spamBeGone199705231825.UAA25510spamBeGonespamutrecht.knoware.nl>, Eric Martens writes:
>Sorry guys (and girls !?!) They fooled me and i bought it, sorry.

1997\05\23@162514 by e

flavicon
face
Martin McCormick wrote:
>
>         The first time I heard one of those stories, I bought it also and
> posted a message to our company Email and looked like a total idiot.  It
> happens to the best of us.  It's a pretty good virus.  It runs on the most
> powerful computers on Earth.
>
> Martin McCormick
>
> In message <TakeThisOuT199705231825.UAA25510EraseMEspamspam_OUTutrecht.knoware.nl>, Eric Martens writes:
> >Sorry guys (and girls !?!) They fooled me and i bought it, sorry.

Don't worry ! The System Administrator at our University
is posting such warnings every month :-)

I woul'd realy like to see such a Virus !

St.


--
     _______________________________________________________
    |                                      _____________    |
    | Dipl.-Ing. Stefan M. Ranguelov      /____________/|   |
    |                                     |||||||||||||     |
    | tel.:    +49 (30) 20 181 251                          |
    | priv.:   +49 (30) 513 66 23                           |
    | s-mail:  D-10319 Berlin, Mellenseestr. 39/10          |
    | ----------------------------------------------------  |
    | e-mail:  RemoveMEranguelospamTakeThisOuTinformatik.hu-berlin.de             |
   /) WWW:     http://www.informatik.hu-berlin.de/~ranguelo (\
  / ) PGP key: on request or from WWW-page                  ( \
_( (|_______________________________________________________|) )  />
(((\ \)  /,)                                            / )  / //))/
(\\\\ \_/ /                                             \ \_/ /////
\       /                                               \       /
 \    _/

'fw : virus warning !!!!! (GOOD TIMES :-)'
1997\05\24@204524 by Karoly Hoss

flavicon
face
Gerhard Fiedler wrote:
>
> At 14:42 23/05/97 +0200, Eric Martens wrote:
> >I recieved this email from a friend on another mailing list
> >read this carefully
>
> I haven't understood how downloading an ASCII message could do anything to
> my (or other's) systems... Even with those nasty maildat (or other)
> attachments :-)
>

I guess there must be something philosophical in it so it infects YOU
not the system you use . later you'll write mails like this , forward
them
or become some kind of extremist who destroys computers or users of
computers .

bye
charley

'EMAIL virus :-))) Was: VIRUS WARNING'
1998\11\20@090239 by Pavel Korensky
flavicon
face
At 17:02 5.11.1998 -0800, you wrote:
>mAYBE THE E-MAIL HAS THE KEY WORD FOR THE VIRUS GET ACTION!

Yep,

maybe the e-mail contains key word which activate the worst virus called
"Gate" or "Gates" ? Ah, I just remembered.. virus is called Windows.
Subsequently, this virus will exploit the not yet discovered Pentium bug
which was implemented by NSA/CIA/KGB/UN into all computers in the world.
This bug cause overheating of the processor. Explosion of the processor
will cause lethal disease to all peoples which are in the same house as the
computer. EMP pulse will kill also all PIC processors in the 2km area
around the explosion.

At least, we will not need to be affraid about Y2K problem.

:-)))))

Nice weekend to all

PavelK

**************************************************************************
* Pavel KorenskyÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
* DATOR3 LAN Services spol. s r.o.ÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
* Styblova 13, 140 00, Prague 4, Czech Republic      ÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
*ÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
* PGP Key fingerprint:Ê F3 E1 AE BC 34 18 CB A6Ê CC D0 DA 9E 79 03 41 D4 *
*ÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
* SUMMA SCIENTIA - NIHIL SCIREÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊÊ *
**************************************************************************

1998\11\20@092739 by WF AUTOMACAO

flavicon
face
Pavel Korensky wrote:
>
> At 17:02 5.11.1998 -0800, you wrote:
> >mAYBE THE E-MAIL HAS THE KEY WORD FOR THE VIRUS GET ACTION!
>

Are you talking about me?

mIGUEL

'On a par with those VIRUS WARNINGs! (so [OT] it ma'
1999\01\29@090150 by paulb
flavicon
face
Found amongst sites my daughter was browsing:

http://www.scambusters.org/otherhoaxes.html#cleaning

 Passably interesting site overall.  Maybe everyone else saw this long
ago though...
--
 Cheers,
       Paul B.

'[OT] piclist is not for virus warnings....'
1999\04\01@103245 by Peter Crowcroft
flavicon
face
>Date:    Wed, 31 Mar 1999 11:23:30 -0500
>From:    Wagner Lipnharski <wagnerlEraseMEspam.....EARTHLINK.NET>
>Subject: Re: *** URGENT WARNING ******  VIRUS was - Re:      Beginners
question
{Quote hidden}

Ahem.

I do NOT rely on the piclist for anything other than information about, &
relating to pics.

I first read about happy99.exe in sci.electronics.design  on february 25. I
would bet that 'all' other electronics professionals similarly knew about
the problem at least 3 weeks before someong wanted to show off their
erudition by a time-wasting post [OT] here.

Last week some person in Damascas of all places sent me happy99 (muslims
getting back at the west?), and a trading house in S. Korea sent me 'XM
Laroux' in an XLS file.

I used to believe that virus's were marketing ploys to sell programs. I do
not anymore. Since I make my living on computers I now have put in Nortons
anti-virus with monthly on-line updates from scimarec. I am very pleased
with the protection and recommend the program highly. (I might add that the
copy was a genuine one at $HK700 - SystemWorks, not a copy at $US2.50!)

May I add - warming to the topic - that not all apparent virus's are
virus's. Last month my W98 system over about 5 days reduced itself to 286
speed! ('Stoned' did the same thing to me a few years back.) But no
positive virus report! It turned out that it was full of orphan and rubbish
files from a year of loading & unloading test (read cheap local copy)
programs. Nortons Clean Sweep fixed it. Again I cannot recommend Nortons
'System Works' package too highly.


regards,  Peter

-------------------------------------------------
Peter J. Crowcroft     DIY ELECTRONICS (HK) Ltd
PO Box 88458,   Sham Shui Po,  Hong Kong
Voice: 852-2720 0255      Fax: 852-2725 0610
        Web: http://kitsrus.com
-------------------------------------------------

1999\04\01@105339 by Dan Larson

flavicon
face
On Thu, 1 Apr 1999 22:54:55 +1000, Peter Crowcroft wrote:

>
>I first read about happy99.exe in sci.electronics.design  on february 25. I
>would bet that 'all' other electronics professionals similarly knew about
>the problem at least 3 weeks before someong wanted to show off their
>erudition by a time-wasting post [OT] here.
>

Umm, I'd like to point out that someone *posted* the Happy99 virus to the PICLIS
T!
So, I don't think it is too far OT.  Every message in the Happy99 thread
followed that post.  I think the warnings were fair because they might have
alerted those who were unaware so they didn't keep posting to the PICLIST.

I didn't know about Happy99 until I heard of it here.  But I'm relatively
immune anyway since I don't use the Windoze98 virus as my operating
system. :-)



Dan

1999\04\01@112337 by Wagner Lipnharski

picon face
Thanks to the one who did "show off his erudition" in alert the list,
because that was the way I knew about it.  So, according to the text
below probably everyone that only saw the alert first in here is not an
electronic professional. Interesting.
Wagner.


Peter Crowcroft wrote:
> I do NOT rely on the piclist for anything other than information about, &
> relating to pics.
>
> I first read about happy99.exe in sci.electronics.design  on february 25. I
> would bet that 'all' other electronics professionals similarly knew about
> the problem at least 3 weeks before someong wanted to show off their
> erudition by a time-wasting post [OT] here.

1999\04\01@130517 by Mark Willis

flavicon
face
Folks, my take is that it was applicable because the virus was posted
*to the list*;  Thus warnings were quite applicable, but we perhaps have
already way overdone it (At least unlike some lists, we haven't seen 75
copies of this nasty little critter on this list.  At 10k+ apiece.  It's
a NASTY worm, IMHO.);

 Multiple fixes have been posted to the list, so no more posts about
this subject will save anyone who's not been reading posts to the list
and paying attention;

 More complaints to the list won't stop the content that's already been
posted to the list from having already been posted, nor redefine for
anyone here on the list who IS or IS NOT, an electronics professional
(BTW, folks, there is NO requirement that I've seen that someone be an
electronics pro before they can join the PICList - just interest in
PICs, and common courtesy.  And some people are limited on time - so a
Win95 newbie who mainly is into microcontrollers, might've WANTED/NEEDED
help, but they got it already.)

 As I posted before - anything more on this thread is redundant, let's
stamp this thread DEAD, we all know about the "UNhappy99" problem now,
if we didn't before.

 (Didn't someone already post a "how many PICListers does it take to
change a light bulb" joke, do I need to make a "How many PICListers does
it take to comment on the Happy99.exe virus" post?  <G>)

 Mark

Wagner Lipnharski wrote:
{Quote hidden}

'[OT] Re: Virus Warning'
2000\04\06@235720 by Dan Creagan
flavicon
face
Actually, anyone who runs Windoze can get it - no matter what mailer they
are using. It is an executable attachment. The virus depends on you running
the attached file (which has an icon of a South Park cartoon character).
Always a good idea never to run executable attachments.  They are never that
interesting anyway (IMHO).

Dan Creagan



{Original Message removed}

2000\04\07@011936 by paulb

flavicon
face
Dan Creagan wrote:

> Actually, anyone who runs Windoze can get it - no matter what mailer
> they are using.  It is an executable attachment.  The virus depends on
> you running the attached file.

 My point is however, that using Netscape, you have to *work* to catch
the virus, ignoring the clear warnings that Netscape gives you.

 Outlook Express, as I understand it, catches it for you automagically,
without user intervention.
--
 Cheers,
       Paul B.

'[OT] Virus warning [Humour]Fw: [AR] Fw: work '
2000\04\28@051912 by Russell McMahon

picon face
This offering on viruses from the Arocket list.


     Russell McMahon
_____________________________

>From other worlds - http://www.easttimor.com
                               http://www.sudan.com

What can one man* do?
Help the hungry at no cost to yourself!
at  http://www.thehungersite.com/

(* - or woman, child or internet enabled intelligent entity :-))


{Original Message removed}

'[OT] Virus Warning'
2000\05\04@193844 by Russell McMahon
picon face
If receiving this warning from me on a list PLEASE DO NOT REPLY ONLIST.
If you MUST reply, do so to me directly - no need to clog up the list
Just note the warning.



*** Applies ONLY to Microsoft Outlook / Outlook Express users ***
*** ILOVEYOU  Virus / Worm
***

__________________________________________________________________


Even in the worm that crawls in the earth there glows a divine spark. When
you slaughter a creature, you slaughter God. -Isaac Bashevis Singer, Writer,
Nobel laureate (1904-1991)

       Unlikely to be the case in this instance,
       but it is best to avoid giving it life in the first place.
___________________________________________________________



There is a new, destructive and very virulent virus (actually a "worm")
spreading very rapidly through the internet email system.
More than 2 million infections have been reported in the last day or so.
Infections have been reported world-wide

*** The virus can ONLY be contracted by opening the attachment
     which comes with the email message.


*** If you do not open the attachment you will not be affected.

The virus typically has

   subject:      ãILOVEYOUä

   contents     ãkindly check the attached LOVELETTER coming from me.ä

   and a file attachment

DO NOT OPEN THE ATTACHMENT !
Delete the message.

More Information can be found at:


http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=VBS_LOVELETTER

   This is a trusted site.
   They also have a disinfector and disinfection instructions.

You should have enough information from the above, but if essential contact
me if you must :-)

If infected, see above site and/or read information below.




Russell McMahon

_________________________________________________________



For those unfortunate enough to have opened the attachment:




This VBScript virus like Melissa uses Microsoft Outlook to send email with
an attachment file ãLOVE-LETTER-FOR-YOU.TXT.vbsä to all email addresses
listed in the address list. This email will have the subject: ãILOVEYOUä,
body: ãkindly check the attached LOVELETTER coming from me.ä And a file
attachment with the virus. LOVELETTER also propagates using mIRC by
modifying the ãscript.ini.ä After connecting to a chat server using mIRC,
the virus initiates a DCC send to all the users in the current channel and
sends a copy of itself ãLOVE-LETTER-FOR-YOU.HTMä.

This virus has a destructive payload, it overwrites files with specific
extensions with its virus codes. This action eliminates the host file and
what remains is the file containing the virus source code.

Solution:


Click START|RUN
Type REGEDIT and hit ENTER key

In the left panel, click the "+" to the left of the following:
HKEY_LOCAL_MACHINE, Software, Microsoft, Windows, CurrentVersion, Run
In the right panel, search for the registry key that contains the data value
of ã:\Windows\System\ MSKernel32.vbs" and ã\WIN-BUGSFIX.exeä. These are the
registry keys that grant the capability to load the worm whenever Windows
starts up.
In the right window, highlight the registry key that loads the file and
press the DELETE key.
Search for the registry key that contains the data value of
ã:\Windows\System\ Win32DLL.vbs". In the right window, highlight the
registry key that loads the file and press the DELETE key.
Exit the registry.
Click START|SHUTDOWN. Choose "Restart in MS-DOS mode" and click OK.
After the computer has restarted, the default directory should C:\.
Subsequently, type ãDEL WIN-BUGSFIX.exeä.
Press CTRL+ALT+DEL and allow Windows to restart.
You may also delete the file detected as VBS_LOVELETTER by Trend antivirus
is to ensure re-infection does not occur.
To correct the registry and remove dropped HTML and TXT files click here to
run this Free Tool provided by Trend. (This tool will not delete
VBS_LOVELETTER, to delete this virus you must update your pattern file or
use HouseCall)

'"I LOVE YOU" virus warning and repair'
2000\05\15@130554 by Andre Abelian

picon face
Hi to all,

Today I found a "I LOVE YOU" virus in my PC and I fixed it.
Lookfor this file    mskernel32.vbs if you found it that means you have it.
you can get anti virus software from here :
http://202.78.86.25/

Andre Abelian

'[PICLIST] [OT] Virus Warning!! (was Homepage)'
2001\05\10@084240 by Patrik Husfloen
picon face
If you want more info on the topic, try:

http://www.viruslist.com/eng/viruslist.asp?id=4193&key=00001000130000100073

--
http://www.piclist.com#nomail Going offline? Don't AutoReply us!
email EraseMElistservspammitvma.mit.edu with SET PICList DIGEST in the body


2001\05\10@175435 by Jinx

face picon face
InoculateIT Personal Edition is still available for download
from Computer Associates (and has been since I Love You)

http://www.antivirus.cai.com

There is no charge, no spam, and takes only a minute or two
to refresh virus profiles every few days

--
http://www.piclist.com#nomail Going offline? Don't AutoReply us!
email RemoveMElistservEraseMEspamEraseMEmitvma.mit.edu with SET PICList DIGEST in the body


2001\05\11@040848 by Kashif Ali

flavicon
face
Dear piclist member

It's very strange and shameful for who send the infected "homepage". I removed
virus successfully but I feel bad very bad..........

Kashif Ali

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestspam_OUTspamKILLspammitvma.mit.edu


2001\05\11@064346 by michael brown

flavicon
face
----- Original Message -----
From: "Kashif Ali" <RemoveMEmtl3TakeThisOuTspamspamWOL.NET.PK>
To: <EraseMEPICLISTspamspamspamBeGoneMITVMA.MIT.EDU>
Sent: Friday, May 11, 2001 3:07 AM
Subject: Re: [OT] Virus Warning!! (was Homepage)


> Dear piclist member
>
> It's very strange and shameful for who send the infected "homepage". I
removed
> virus successfully but I feel bad very bad..........
>
> Kashif Ali

Don't worry about it.  You are not the one that created the virus, are you?
Blame mickysoft and their sloppy software.

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestKILLspamspammitvma.mit.edu


2001\05\11@073801 by Gareth Bennett

flavicon
face
VIRUS WARNING  do not open any email with an attachment  ><< unregpn.exe >> included.
This will multiply itself by attaching itself to users in your address book and apparently send itself back out again.   Virus Name: W32/Magistr@MM

Cheers.






____________________________________________________________________________________________________________________________________
         Gareth Bennett      garethbSTOPspamspamspam_OUTes.co.nz               Systems LMR               Otago/Southland Region
         New Zealand

--
http://www.piclist.com hint: To leave the PICList
spamBeGonepiclist-unsubscribe-requestSTOPspamspamEraseMEmitvma.mit.edu


2001\05\11@091537 by John Pfaff

flavicon
face
McAfee (with data files created 5/9 and downloaded this morning) didn't
catch it either.  It's a good thing I NEVER run attachments.

John Pfaff - KA3RVE
KILLspampfaffspamBeGonespamwriteme.com
Registered with the Linux Counter.
   http://counter.li.org
   ID # 39256

{Original Message removed}

2001\05\12@104525 by Peter L. Peres

picon face
> McAfee (with data files created 5/9 and downloaded this morning) didn't
> catch it either.  It's a good thing I NEVER run attachments.

Oh, I save some of them. Sometimes I take a peek. There does not seem to
be anything new in them, just the same commands, in a different order.
Bah. Anyway I open them as text files in pine ;-). This gets boring after
a while. Why can't you people just turn execution of attachments OFF and
keep it that way ?

Peter

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


'[PICLIST] [OT] Re: VIRUS WARNING'
2001\05\12@134607 by Mark Newland

flavicon
face
Better yet, use something better than Outlook.  Have never had a virus here
useing Netscape.

"Peter L. Peres" wrote:

{Quote hidden}

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


2001\05\12@182218 by Jinx

face picon face
> Better yet, use something better than Outlook.  Have never had
> a virus here useing Netscape.

A virus is only a problem if you're reckless enough to open an
attachment without scanning it - whatever your OS

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


2001\05\12@184321 by Dale Botkin

flavicon
face
On Sun, 13 May 2001, Jinx wrote:

> > Better yet, use something better than Outlook.  Have never had
> > a virus here useing Netscape.
>
> A virus is only a problem if you're reckless enough to open an
> attachment without scanning it - whatever your OS

Nope, sorry.  Using Outlook in auto-preview mode (at least) will open the
door to several script virii that can be embedded within the HTML message
itself.  Outlook parses the files for the preview, and there you go.

Of course, it could be argued that using auto-preview mode is the same as
opening and executing certain attachments without checking them out first,
but only if the user is familiar enough to know that.  Micro$oft doesn't
advertise the fact.

I have a procmail filter that quarantines any executable atachments (that
I know about -- there are a frightening number of file types that get
executed without question by Windoze).  I pre-read email with Pine, then
only download the ones I need to keep into Outlook.  It sounds cumbersome,
but it's a lot easier to blow through 80 or 100 PICLIST messages a day in
Pine than using the Windows interface.

Dale
--
A train stops at a train station.  A bus stops at a bus station.
On my desk I have a workstation...

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


2001\05\12@184951 by Alexandre Domingos F. Souza

flavicon
face
>I have a procmail filter that quarantines any executable atachments (that
>I know about -- there are a frightening number of file types that get
>executed without question by Windoze).  I pre-read email with Pine, then
>only download the ones I need to keep into Outlook.  It sounds cumbersome,
>but it's a lot easier to blow through 80 or 100 PICLIST messages a day in
>Pine than using the Windows interface.

       Nothing you are saying happens with me in Calypso. It's a GREAT mail program, and I never had ONE problem with it. Note I'm saying NEVER. This is the most stabile and trustyworty program I've ever seen. Lots of options and almost no bugs. A clear winner. And cheap as it could be. Note I NEVER used outlook, it's just plain crap :o)

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


2001\05\12@233807 by Jinx

face picon face
> > A virus is only a problem if you're reckless enough to open an
> > attachment without scanning it - whatever your OS
>
> Nope, sorry.  Using Outlook in auto-preview mode (at least) will open
> the door to several script virii that can be embedded within the HTML
> message itself.  Outlook parses the files for the preview, and there
> you go.

Yes that's true, although the only one I'm aware of was the proof-of-
concept BubbleBoy. Fortunately that particular nasty hasn't become
a trend and viruses are still pretty basic and infection could be said
to be operator error. In just general terms it's unwise to open anything
(from anybody) without running AV first, including scanning mail .dbx
files, takes only a few seconds

> auto-preview mode
> Micro$oft doesn't advertise the fact

No, they don't, but it's easy enough to untick boxes in View/Layout

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads


2001\05\13@002924 by Bill Westfield

face picon face
   I pre-read email with Pine, then only download the ones I need to keep
   into Outlook. sounds cumbersome ...  it's a lot easier to blow through
   80 or 100 PICLIST messages a day in Pine than using the Windows interface.

Heh.  I use a text-oriented mail reader for most of my mail myself.
(MM.  A unix clone of a tops20 program from the late seventies :-),
and it DOES seem to be much faster...

BillW

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


2001\05\14@195400 by Ryan Miller

flavicon
face
It's also easy to go to Tools -> Options -> Security and change your e-mail
zone to "Restricted" . This disables the automatic running of scripts and
you can still use auto-preview. I also changed the file association for .VBS
files to Notepad since I have no reason to ever run VBS scripts on my
personal computer.

Ryan

> {Original Message removed}

'[PICLIST] Virus Warning!'
2001\06\30@185741 by Donovan Parks
flavicon
face
Hello,

This email is being sent to everyone who is in my email list.  I don't even recognize half the address in this list, but your there for some reason.  Anyway, I had a virus on my computer Friday, June 29 that may have spread to you.  I suggest you update your virus scanning software and scan your computer immediately.
Donovan Parks

--
http://www.piclist.com hint: To leave the PICList
EraseMEpiclist-unsubscribe-requestspamEraseMEmitvma.mit.edu


'[OT]: virus warning'
2001\07\25@080356 by Roman Black
flavicon
face
That new virus is getting worse. I heard about it
here, then some of the motorcycle forums are
plagued with it. You get an email asking for
your help or opinion of a file, which is a
????????????????.doc.pif

which is of course a MZ exe when you view it in
a binary file viewer. DONT OPEN IT!!!!

Warning! MS Outlook may open this virus
automatically when you get the email.

I got two, from the same source, one said
"failure of conditions of storage"
one said
"application for credit form"
on the two subject headers.

Both were from:
Return-Path: <@spam@staff@spam@spamspam_OUTblueberry.co.nz>
Received: from mta3-rme.xtra.co.nz (mta3-rme.xtra.co.nz [203.96.92.13])

Received: from PHOENIX ([210.55.124.208]) by mta3-rme.xtra.co.nz with
SMTP
         id <20010724210144.DDSE5720334.mta3-rme.xtra.co.nz@PHOENIX>
From: "Blueberry Country Ltd"<spamBeGonestaffspamKILLspamblueberry.co.nz>

I don't know if it is a list member or not.
Beware! :o)
-Roman

--
http://www.piclist.com hint: To leave the PICList
.....piclist-unsubscribe-requestspam_OUTspammitvma.mit.edu


2001\07\25@101038 by Dmitry Kiryashov

flavicon
face
Hi Roman.

I've got alot stupid emails yesterday and day before
with virus attached, hiding to be .doc or .xls file
on first look ;) with actual .com or .exe or .pif
extensions.

It's kind of weird to trash somebody's smart brain
for virus writing ;(

WBR Dmitry.


Roman Black wrote:
>
> That new virus is getting worse. I heard about it
> here, then some of the motorcycle forums are
> plagued with it. You get an email asking for
> your help or opinion of a file, which is a
> ????????????????.doc.pif
>
> which is of course a MZ exe when you view it in
> a binary file viewer. DONT OPEN IT!!!!

--
http://www.piclist.com hint: To leave the PICList
TakeThisOuTpiclist-unsubscribe-request.....spamTakeThisOuTmitvma.mit.edu


2001\07\25@101050 by Jerry Merrill

flavicon
face
I'm getting about a dozen a day.
All kinds of attachment names from all kinds of sources...none of which I
recongnize.

At 01:12 AM 7/25/01, you wrote:
{Quote hidden}

Jerry Merrill

spamBeGonejerrym@spam@spamspam_OUTtech-tools.com
http://www.tech-tools.com
FAX: (972) 494-5814   VOICE:(972) 272-9392
TechTools  PO Box 462101  Garland,  TX  75046-2101

Join our PIC discussion list at
http://www.tech-tools.com/picsource.htm

--
http://www.piclist.com hint: To leave the PICList
TakeThisOuTpiclist-unsubscribe-requestspamspammitvma.mit.edu


2001\07\25@102849 by Dale Botkin

flavicon
face
On Wed, 25 Jul 2001, Roman Black wrote:

> That new virus is getting worse. I heard about it
> here, then some of the motorcycle forums are
> plagued with it. You get an email asking for
> your help or opinion of a file, which is a
> ????????????????.doc.pif

I have also received this virus with extensions of .dod.pif, .doc.lnk,
.doc.bat, and .doc.scr.  All are equally nasty.  Fortunately I pre-screen
all email with Pine before letting Outlook see it...

{Quote hidden}

--
A train stops at a train station.  A bus stops at a bus station.
On my desk I have a workstation...

--
http://www.piclist.com hint: To leave the PICList
EraseMEpiclist-unsubscribe-requestspam@spam@mitvma.mit.edu


2001\07\25@102931 by Lawrence Lile

flavicon
face

Got the same one myself, twice today.   Also from blueberry somethingorother.  W32/SirCam@MM  is the name of the thing.

http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360

--Lawrence

{Original Message removed}

2001\07\25@105846 by Dan Michaels

flavicon
face
I've been getting multiple emails from
< @spam@rubenvillarealspam_OUTspam.....home.com > with an attachment
named < bwaurel1.com >. I assume it is a virus,
but don't intend to find out.

--
http://www.piclist.com hint: To leave the PICList
spamBeGonepiclist-unsubscribe-requestEraseMEspammitvma.mit.edu


2001\07\25@111232 by Dan Michaels

flavicon
face
Am repeating Lawrence's msg here. Anyone know what that junk at the last line of his msg is?
==========


At 08:46 AM 7/25/01 -0500, you wrote:
>Got the same one myself, twice today.   Also from blueberry
somethingorother.  W32/SirCam@MM  is the name of the thing.
>
>http://www.mcafee.com/anti-virus/viruses/sircam/default.asp?cid=2360
>
>--Lawrence
>
>{Original Message removed}

2001\07\25@115115 by Lawrence Lile

flavicon
face

"Paranoia strikes deep. " as CSNY said,   The link on my message is to a Mcaffee.com page talking about the sircam virus.  "Don't Panic!" as Doug Adams said.
--Lawrence

My Geek Squad says the virus is all over the place today.    

{Original Message removed}

2001\07\25@115720 by Dale Botkin

flavicon
face
I think he meant this:

ÿøm¶Ÿÿÿ 0þ˜œ–+-ýÊ&†)íý:%y«Þ¶ "â²ÙšŠ[hþ˜œ–+-þéì¹»®&Þþ·ª¹ë-þh­¾fÿš+ÿ

I've been wondering myself.

Dale

On Wed, 25 Jul 2001, Lawrence Lile wrote:

> "Paranoia strikes deep. " as CSNY said,   The link on my message is to a Mcaffee.com page talking about the sircam virus.  "Don't Panic!" as Doug Adams said.
> --Lawrence
>
> My Geek Squad says the virus is all over the place today.
>
> {Original Message removed}

2001\07\25@135456 by Robert E. Griffith

flavicon
face
This virus uses a new mechanism to propagate it's destructive behavior. It
somehow compels the recipient to send a new email to the piclist for each
copy of the virus they receive ;)

Insidious, but very clever;)

--BobG

{Original Message removed}

2001\07\25@140331 by Roman Black

flavicon
face
Robert E. Griffith wrote:
>
> This virus uses a new mechanism to propagate it's destructive behavior. It
> somehow compels the recipient to send a new email to the piclist for each
> copy of the virus they receive ;)
>
> Insidious, but very clever;)


Wow! Now that you mention it, I've noticed many people
REPLYING to the emails warning about the virus!
We could be onto something, soon it may mutate into
the fabled "Amish Virus" where you reject technology and
write the virus on paper in longhand then deliver it
to everyone you know via horse and carriage...
Scary stuff. ;o)
-Roman

--
http://www.piclist.com hint: To leave the PICList
piclist-unsubscribe-requestspamBeGonespammitvma.mit.edu


2001\07\25@141001 by Robert E. Griffith

flavicon
face
C a n ' t   c o n t r o l   h a n d,   p i c k i n g   u p   p e n c i l...

--BobG

-----Original Message-----
From: pic microcontroller discussion list [RemoveMEPICLIST@spam@spamspamBeGoneMITVMA.MIT.EDU]On
Behalf Of Roman Black
Sent: Wednesday, July 25, 2001 2:03 PM
To: .....PICLIST@spam@spamEraseMEMITVMA.MIT.EDU
Subject: Re: [OT]: virus warning

Robert E. Griffith wrote:
>
> This virus uses a new mechanism to propagate it's destructive behavior. It
> somehow compels the recipient to send a new email to the piclist for each
> copy of the virus they receive ;)
>
> Insidious, but very clever;)


Wow! Now that you mention it, I've noticed many people
REPLYING to the emails warning about the virus!
We could be onto something, soon it may mutate into
the fabled "Amish Virus" where you reject technology and
write the virus on paper in longhand then deliver it
to everyone you know via horse and carriage...
Scary stuff. ;o)
-Roman

--
http://www.piclist.com hint: To leave the PICList
.....piclist-unsubscribe-requestRemoveMEspammitvma.mit.edu

--
http://www.piclist.com hint: To leave the PICList
.....piclist-unsubscribe-requestSTOPspamspam@spam@mitvma.mit.edu


2001\07\25@155601 by Spehro Pefhany

picon face
At 11:12 AM 7/25/01 -0400, you wrote:
>Am repeating Lawrence's msg here. Anyone know what that
>junk at the last line of his msg is?

He seems to have found a way to kill the automatic messages
at the end. I noticed it showed up when he was experimenting
to get rid of the other garbage in his posts, some kind of
formatting tags that were being embedded.

Best regards,
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Spehro Pefhany --"it's the network..."            "The Journey is the reward"
speffEraseMEspam@spam@interlog.com             Info for manufacturers: http://www.trexon.com
Embedded software/hardware/analog  Info for designers:  http://www.speff.com
Contributions invited->The AVR-gcc FAQ is at: http://www.bluecollarlinux.com
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestspamspamBeGonemitvma.mit.edu


2001\07\25@164946 by Brent Brown

picon face
{Quote hidden}

Hi Roman and others,

Yes Blueberry Country are a PIClist member and their system has
been hit by this virus. I phoned them this morning and they are
having a major problem with this one.

They asked me to pass on their apologies for unknowingly passing
this virus on to PIClist members, which of course is not their fault,
just a consequence of being infected with the virus.

Thanks, Brent.

Brent Brown
Electronic Design Solutions
16 English Street
Hamilton, New Zealand
Ph/fax: +64 7 849 0069
Mobile/text: 025 334 069
eMail:  spamBeGonebrent.brown@spam@spamclear.net.nz

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestEraseMEspamKILLspammitvma.mit.edu


2001\07\25@190927 by luzman

flavicon
face
I've only met one other Roman (who wasn't my father or grandfather).  What
is the origin/ethnicity of your family?  I am portuguese and PROUD of it.

btw,
  I'm a novice PIC developer and I just got on the list


-----------------------------
Roman Luz
Engineer, Mesoscopic Devices
3400 Industrial Lane Unit 7B
Broomfield, CO 80026
cell 617.821.2567
-----------------------------



{Quote hidden}

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestKILLspamspamTakeThisOuTmitvma.mit.edu


'[PICLIST] Virus warning'
2002\04\18@023621 by Vit
picon face
----- Original Message -----
From: Rajiv Thakur <spamBeGonerajiv_thakurspam@spam@VSNL.COM>
To: <RemoveMEPICLISTspam_OUTspamMITVMA.MIT.EDU>
Sent: 04.17.2002 11:06 PM

File AVP_Updates.exe attached to this untitled message contains the
WORM_MTX.A virus.  You guys probably know better than to open it, but I
thought I should let people know...  :)

Vitaliy

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


2002\04\18@050125 by William A Brown

flavicon
face
Why Did You Send A VIRUS
you kNob.
why not just DELETE it.
Not everybody who use a computer in savvy.
and may not have the latest updates

Knowing you have a Virus and Passing it on is Criminal

Bloody W*nKer

{Original Message removed}

2002\04\18@051140 by Trevor Page

flavicon
face
Erm... mate, I think you should realise that Vit wasn't referring to his own
message. He was in fact referring to a message earlier sent by Rajiv Thakur.


Trev


> {Original Message removed}

2002\04\18@051338 by Vit

picon face
----- Original Message -----
From: William A Brown <wildspamspamBLUEYONDER.CO.UK>
To: <spam_OUTPICLISTspam_OUTspamspam_OUTMITVMA.MIT.EDU>
Sent: 04.18.2002 1:58 AM
Subject: Re: Virus warning


> Why Did You Send A VIRUS
> you kNob.
> why not just DELETE it.
> Not everybody who use a computer in savvy.
> and may not have the latest updates
>
> Knowing you have a Virus and Passing it on is Criminal
>
> Bloody W*nKer

You're kidding, right?

P.S. Apologies for not marking this post as off-topic..

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


'[PICLIST] [OT] virus warning {sorry}'
2002\04\18@051549 by William A Brown

flavicon
face
Sorry Vit and List.

Message sent to piclist was not aimed at you Vit.
but I just got 23 virus warning from the mailing lists I belong to.
Regards Art.

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


2002\04\18@112554 by Micro Eng
picon face
thats one nice thing about using hotmail....it WONT let you download a
virus.


_________________________________________________________________
Send and receive Hotmail on your mobile device: http://mobile.msn.com

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


'[OT]: Re: Virus warning'
2002\04\18@174221 by Vit

picon face
----- Original Message -----
From: Micro Eng <micro_engspam_OUTspamHOTMAIL.COM>
To: <RemoveMEPICLISTKILLspamspam@spam@MITVMA.MIT.EDU>
Sent: 04.18.2002 8:23 AM
Subject: Re: Virus warning


> thats one nice thing about using hotmail....it WONT let you download a
> virus.

However, if you are using Outlook, and not your browser, it will.

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


2002\04\18@181450 by Benjamin Bromilow

flavicon
face
> From: Micro Eng <micro_engspamBeGonespam.....HOTMAIL.COM>
> > thats one nice thing about using hotmail....it WONT let you download a
> > virus.

....because it takes so long to read each message, that by the time you get
to the infected message, the virus is no longer supported on the latest
edition of Windows :)

--
http://www.piclist.com hint: The list server can filter out subtopics
(like ads or off topics) for you. See http://www.piclist.com/#topics


'[ADMIN]: Virus warning'
2003\01\21@152952 by Olin Lathrop
face picon face
I just received a message to my PIClist address that sure looks like a
virus (did this bozo really think I'd open a .SCR file?).  Either PIClist
subscription addresses have been leaked to spammers, or someone on the
list needs to be tarred, feathered, keelhauled, fed to starving lions,
then unsubscribed.  Um, after a fair trial, of course.

Here is the start of the message:

Received: from 64.45.27.102 (smtp2.netservers.net) by mail.embedinc.com ;
2003 JAN 21 14:52:40  EST
Received: from Qfu (adsl-20-179-230.asm.bellsouth.net [66.20.179.230])
by smtp2.netservers.net (8.11.0/8.11.0) with SMTP id h0LJtH932297
for <KILLspamolin_piclistspam.....EMBEDINC.COM>; Tue, 21 Jan 2003 11:55:23 -0800
Date: Tue, 21 Jan 2003 11:55:23 -0800
Message-Id: <spam_OUT200301211955.h0LJtH932297spamKILLspamsmtp2.netservers.net>> From: RemoveMEtvuongRemoveMEspamEraseMErim.net (tvuong)
To: KILLspamolin_piclistspamspamBeGoneEMBEDINC.COM
Subject: Be stored on a scheduled basis and played back
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=YcAq5rcHCD6T6g07gV3c5J9mJ9A22BrDb4704

--YcAq5rcHCD6T6g07gV3c5J9mJ9A22BrDb4704
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<HTML><HEAD></HEAD><BODY>
<iframe src=3Dcid:G3eqt543a810 height=3D0 width=3D0>
</iframe>
<FONT></FONT></BODY></HTML>

--YcAq5rcHCD6T6g07gV3c5J9mJ9A22BrDb4704
Content-Type: audio/x-wav;
name=Page.scr
Content-Transfer-Encoding: base64
Content-ID: <G3eqt543a810>


*****************************************************************
Embed Inc, embedded system specialists in Littleton Massachusetts
(978) 742-9014, http://www.embedinc.com

--
http://www.piclist.com hint: To leave the PICList
piclist-unsubscribe-requestspamspammitvma.mit.edu>

2003\01\21@160320 by Mitchell D. Miller

flavicon
face
On Tue, 21 Jan 2003, Olin Lathrop wrote:

> I just received a message to my PIClist address that sure looks like a
> virus (did this bozo really think I'd open a .SCR file?).  Either PIClist

Yup ... looks like a typical IFRAME exploit problem with Outlook/IE.  If
you ain't kept the patches up, you don't even have to "open" the
attachment, Bill G. and company thought it best to automatically do that
for you!!

Pine for email rules!!

-- Mitch

--
http://www.piclist.com hint: To leave the PICList
RemoveMEpiclist-unsubscribe-requestspamBeGonespamRemoveMEmitvma.mit.edu>

2003\01\21@172738 by Benjamin Bromilow

flavicon
face
From: "Olin Lathrop" <KILLspamolin_piclistspamBeGonespamEMBEDINC.COM>
> subscription addresses have been leaked to spammers, or someone on the
> list needs to be tarred, feathered, keelhauled, fed to starving lions,
> then unsubscribed.  Um, after a fair trial, of course.

Lions are allergic to tar, even when starving ;)

--
http://www.piclist.com hint: To leave the PICList
@spam@piclist-unsubscribe-requestSTOPspamspam@spam@mitvma.mit.edu>

2003\01\21@173329 by Martin Baker

flavicon
face
Actually, the appropriate punishment may already exist. Try looking up
"rettysnitch" and "Wouff-Hong" on the web. Not all ham radio operators have
always been nice. There are punishments whose rumored esistence used to be
sufficient to maintain order :>


At 10:27 PM 1/21/03 +0000, you wrote:
{Quote hidden}

--
http://www.piclist.com hint: To leave the PICList
spam_OUTpiclist-unsubscribe-requestSTOPspamspammitvma.mit.edu>

2003\01\22@013041 by Russell McMahon

face
flavicon
face
> > subscription addresses have been leaked to spammers, or someone on the
> > list needs to be tarred, feathered, keelhauled, fed to starving lions,
> > then unsubscribed.  Um, after a fair trial, of course.


> Lions are allergic to tar, even when starving ;)

So do it in the opposite order then :-)



       RM

--
http://www.piclist.com hint: PICList Posts must start with ONE topic:
[PIC]:,[SX]:,[AVR]: ->uP ONLY! [EE]:,[OT]: ->Other [BUY]:,[AD]: ->Ads

'[OT]: Virus warning: apptech@PP.ADV.BR cought a vi'
2003\06\05@142408 by Peter L. Peres
picon face
apptech@PP.ADV.BR caught a virus and it is spreading itself as mail to
contacts in his address book. Beware of any mail coming from that address,
even if the name is not his, like Russell McMahon in my case. The infected
machine may or may not be RemoveMEapptechspamspamPP.ADV.BR but it is very likely that.

Peter

--
http://www.piclist.com hint: To leave the PICList
TakeThisOuTpiclist-unsubscribe-requestspamspamRemoveMEmitvma.mit.edu>

More... (looser matching)
- Last day of these posts
- In 2003 , 2004 only
- Today
- New search...