OT new virus out
 

a new one is on the loose, please update your virus scanners
as this is spreading fast. Ive already recieved 50+ lol

your infected if you recieved it or checked your mail. period!

so update and get it clean! please? :)



MIMAIL/MyDoom/Novarg Email Virus Continues

Beginning about 5 pm EST (2200 UTC) yesterday we began receiving a flood
of email containing a malicious attachment. To visually see what has
been arriving at our servers, we have two graphs available. We are
showing emails per 10 minutes at http://isc.sans.org/images/virus.png
and emails per hour at http://isc.sans.org/images/virus2.png . Notice
the drop-off overnight followed by the rapid increase this morning as
people came to work. There was a spike for the east coast workers and
another increase as the west coast came to work. The time across the
bottom is EST. Today's increase started at about 8 am Central European
time, again corresponding roughly to the time workers began opening
their mail. This afternoon there has been a gradual decrease as the
infected computers are brought under control. While no new variants have
been detected yet, it would not be
unexpected to see modified versions appear in the next few days.

A very detailed writeup of the events surrounding this malware
including analysis and discussions by
the Trojan Horses Research Mailing List is available online at
http://www.math.org.il/newworm-digest1.txt




--
--
http://www.kencofish.com Ken Arnold,
401-781-9642 cell 401-225-0556
Importer/Exporter of Goldfish,Koi,rare Predators
Shipping to legal states/countries only!
Permalon liners, Oase & Supreme Pondmaster pumps


Linux (SuSE 8.2) user #329121
Please Note: No trees or animals were harmed in the
sending of this contaminant free message We do concede
that a signicant number of electrons may have been
inconvenienced ;)

OT new virus out
 

KenCo wrote:

a new one is on the loose, please update your virus scanners
as this is spreading fast. Ive already recieved 50+ lol

your infected if you recieved it or checked your mail. period!

Nope. Need to open the attachment.

Safe viewer Irfanview:

http://www.pricelessware.org/2003/PL...PHICS.htm#A426

It's my default for *everything* it will handle. I think it needs a
couple of plug ins because of copyright problems.

so update and get it clean! please? :)

Foxmail.

http://www.pricelessware.org/2003/PL...ERNET.htm#A343



Removing IE or OE will also close most loopholes, as will changing the
bindings.
http://www.epix.net/~artnpeg

Art Kopp (alt.comp.freeware and alt.comp.virus) is good people and one
of the early progammers. He has a lot of good info for the DOS based
windows programs, but it looks like he is fading off with the new NT
based M$ programs.

OT new virus out
 

My AV program, e Trust EZ Antivirus, won't alert on email, I think it is
because the email is in a compressed format, but once the file or

Strange, MY EZ Trust lerts on email....

OT new virus out
 

I got a few of these Es with the attachment, some my ISP picked up, but
some came thru. It was really interesting in that some of the From's looked
like people I should know, like people with my last name (but looking
closely not from anyone related to me). I thought that was either very
weird or they're getting trickier to get people in a hurry to open them.
~ jan

OT new virus out
 

I got a few of these Es with the attachment, some my ISP picked up, but
some came thru. It was really interesting in that some of the From's looked
like people I should know, like people with my last name (but looking
closely not from anyone related to me). I thought that was either very
weird or they're getting trickier to get people in a hurry to open them.

The From address is spoofed, but lookks real enough so that a lot of
users are opening the attachment.

Here is a good site to read about mydoomA:
http://www3.ca.com/virusinfo/virus.aspx?ID=38102

OT new virus out
 

Hal wrote:

That's great! Go ahead and open it. I'm just chicken. :) I'm not
opening an attachment that looks suspicious just because it didn't alert
until I put it on the hard drive. Then if it doesn't alert, it is OK.

Not necessarily. Most of the anti virus programs do not alert on brand
new viruses.

I leave questionable e-mail unopened for a couple days and update the
anti virus, then rescan. Mozilla also allows saving e-mail as .txt and
I open with notepad.

Any e-mail that cannot get read as text, gets tossed.

OT new virus out
 

On Fri, 30 Jan 2004 13:49:14 -0900
Offbreed wrote:

Hal wrote:

That's great! Go ahead and open it. I'm just chicken. :) I'm
not opening an attachment that looks suspicious just because it
didn't alert until I put it on the hard drive. Then if it doesn't
alert, it is OK.

Not necessarily. Most of the anti virus programs do not alert on brand

new viruses.

I leave questionable e-mail unopened for a couple days and update the
anti virus, then rescan. Mozilla also allows saving e-mail as .txt and

I open with notepad.

Any e-mail that cannot get read as text, gets tossed.

I open anything that shows up in my inbox. Worms, trojans, viruses, and
such make no difference to me. I use a secure system. You can, too.

Cybe R. Wizard
--
Unofficial "Wizard of Odds," A.H.P.
Original PORG "Water Wizard," R.P.
"Wize(ned) Wizard," A.P.F-P-Y.
Barely Tolerated Wizard, A.J.L & A.A.L

OT new virus out
 

Cybe R. Wizard wrote:

I open anything that shows up in my inbox. Worms, trojans, viruses, and
such make no difference to me. I use a secure system. You can, too.

My ISP is not *nix freindly, and I cannot afford a Mac. So, I deleted
IE and OE and use 3rd party freeware for the internet, until I figure
out pppd, etc. Had it up once, hdd crashed.

OT new virus out
 

On Fri, 30 Jan 2004 14:38:55 -0900
Offbreed wrote:

Cybe R. Wizard wrote:

I open anything that shows up in my inbox. Worms, trojans, viruses,
and such make no difference to me. I use a secure system. You can,
too.

My ISP is not *nix freindly, and I cannot afford a Mac. So, I deleted
IE and OE and use 3rd party freeware for the internet, until I figure
out pppd, etc. Had it up once, hdd crashed.

Mine's not, either. I don't tell 'em. Good going, using something
other that Microsoft malware. I was a real Agent fan before having a
sea change.

Cybe R. Wizard
--
Unofficial "Wizard of Odds," A.H.P.
Original PORG "Water Wizard," R.P.
"Wize(ned) Wizard," A.P.F-P-Y.
Barely Tolerated Wizard, A.J.L & A.A.L

OT new virus out
 

On Fri, 30 Jan 2004 22:09:12 -0500
Hal wrote:

On Fri, 30 Jan 2004 23:16:52 GMT, "Cybe R. Wizard"
Cybe_R_Wizard@WizardsTower wrote:

I open anything that shows up in my inbox. Worms, trojans, viruses,
and such make no difference to me. I use a secure system. You can,
too.

Not if I have no idea what you are talking about. Sounds interesting
though. What do you mean a secure system?

Regards,

Hal

A system built from the start to disallow simple users changing the
system at all except to install new software /to their own directories/.
A system which has full logging capacity in order to follow what has
been done to it. A system that only needs antivirus software to protect
others who may not use secure systems. There are really a bunch of
these type systems.

The one that I use is Debian GNU/Linux.

In effect, anything other than Microsoft OSes, for which viruses and
such are written, not because Windows is so prevalent, but because
Windows is written /to be insecure/. Follow the money.

The list of such secure systems includes such well known OSes as Mac
OSX, UNIX, Solaris, BeOS, and the BSDs and such little known OSes as
QNX.

Cybe R. Wizard
--
Unofficial "Wizard of Odds," A.H.P.
Original PORG "Water Wizard," R.P.
"Wize(ned) Wizard," A.P.F-P-Y.
Barely Tolerated Wizard, A.J.L & A.A.L