Post by thread:-VIRUS- [EE]: Getting at a struct of flags as a

> -----Original Message----- > From: Bob Blick [spam_OUTbblickTakeThisOuTSONIC.NET] > Sent: Tuesday, October 01, 2002 8:28 AM > > The original email, from Ashley Roll, has a virus attached. Beware! The virus must be pretty creative. The original copy I got had Douglas Butler as the sender. -Mike -- http://www.piclist.com hint: The PICList is archived three different ways. See http://www.piclist.com/#archives for details.

might i add its undetected by symantec AV andrew ----- Original Message ----- From: "Bob Blick" <.....bblickKILLspam@spam@SONIC.NET> To: <PICLISTKILLspamMITVMA.MIT.EDU> Sent: Tuesday, October 01, 2002 11:28 AM Subject: -VIRUS- [EE]: Getting at a struct of flags as a byte ? {Quote hidden}> The original email, from Ashley Roll, has a virus attached. Beware! > > -Bob > > -- > http://www.piclist.com hint: The PICList is archived three different > ways. See http://www.piclist.com/#archives for details. > > > -- http://www.piclist.com hint: The PICList is archived three different ways. See http://www.piclist.com/#archives for details.

On Tue, 1 Oct 2002, andy n1yew wrote: > might i add its undetected by symantec AV Huh. I can't imagine why... I just have a simple little Procmail script that so far has caught 100.0% of virus infected emails arriving here. I see this one a dozen or so times a week or more, and it's getting worse. The attachment is usually tagged as an audio file or something similar, but has attachments with various executable extensions, such as those normally used for screen savers, batch files, p i f, etc. It's been a minor annoyance, but so far none have even made it as far as the antivirus installed on the PC. Dale -- http://www.piclist.com hint: The PICList is archived three different ways. See http://www.piclist.com/#archives for details.

On 1 Oct 2002 at 14:33, andy n1yew wrote: > might i add its undetected by symantec AV My Symantec Norton AV 2001 didn't flag it when it scanned the email coming in but does if you click on the attachment. -- Brent Brown, Electronic Design Solutions 16 English Street, Hamilton, New Zealand Ph/fax: +64 7 849 0069 Mobile/txt: 025 334 069 eMail: .....brent.brownKILLspam.....clear.net.nz -- http://www.piclist.com hint: The PICList is archived three different ways. See http://www.piclist.com/#archives for details.

I recently decided to clean up my Eudora attachment directory and clicked on a file to see what it was and got the wormklez. Not knowing this, I sent out several emails and all of them were returned by the receiving mail servers stating that the mail was undeliverable and all of them had an attachment of about 90 kb with different names and different executable extensions. I then tried to scan with mcafee, however, it would not run because a file had been deleted in my anti virus directory. I then went to PCcillin web site and it scanned my drive and found the wormklez and deleted it. FYI Jim At 08:28 AM 10/1/02 -0700, you wrote: {Quote hidden}>The original email, from Ashley Roll, has a virus attached. Beware! > >-Bob > >-- >http://www.piclist.com hint: The PICList is archived three different >ways. See http://www.piclist.com/#archives for details. > > > -- http://www.piclist.com#nomail Going offline? Don't AutoReply us! email EraseMElistservspam_OUTTakeThisOuTmitvma.mit.edu with SET PICList DIGEST in the body