* Re: Run in DOS mode.
` Kerry Hoath
@ ` Igor Gueths
` Rich Caloggero
` Toby Fisher
` (2 subsequent siblings)
3 siblings, 1 reply; 14+ messages in thread
From: Igor Gueths @ UTC (permalink / raw)
To: speakup
Hi Kerry. I got this as well, it appears to be a broken html page.
----- Original Message -----
From: Kerry Hoath <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.
> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> >
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> --
> Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Igor Gueths
@ ` Rich Caloggero
0 siblings, 0 replies; 14+ messages in thread
From: Rich Caloggero @ UTC (permalink / raw)
To: speakup
The virus hides inside the HTML page somehow. Don't mess with it, just
delete it.
Rich
----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:52 AM
Subject: Re: Run in DOS mode.
Hi Kerry. I got this as well, it appears to be a broken html page.
----- Original Message -----
From: Kerry Hoath <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.
> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> >
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> --
> Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread
* Re: Run in DOS mode.
` Kerry Hoath
` Igor Gueths
@ ` Toby Fisher
` TALMAGE
` Rich Caloggero
3 siblings, 0 replies; 14+ messages in thread
From: Toby Fisher @ UTC (permalink / raw)
To: speakup
On Sun, 12 May 2002, Kerry Hoath wrote:
> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
Kerry, don't worry, the time zone is wrong anyway, it was -0400, you are
+0800, and your name wasn't included. I just deleted it.
Cheers.
--
Toby Fisher Email: toby@g0ucu.freeserve.co.uk
Tel.: +44(0)1480 417272 Mobile: +44(0)7974 363239
ICQ: #61744808
Please avoid sending me Word or PowerPoint attachments.
See http://www.fsf.org/philosophy/no-word-attachments.html
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Kerry Hoath
` Igor Gueths
` Toby Fisher
@ ` TALMAGE
` Charles Hallenbeck
` Rich Caloggero
3 siblings, 1 reply; 14+ messages in thread
From: TALMAGE @ UTC (permalink / raw)
To: speakup
Hi Kerry,
Being the curious sort I ran McAfee on the file and here is what it had to
say.
Found the W32/Klez.e@MM virus !!!
There must be a virus writers convention going on or something, I've
gotten 7 or 8 in the last couple of weeks alone.
Where is + 0400, Greenland?
Dave
At 10:30 PM 5/12/02 +0800, you wrote:
>I didn't originate this,
>somebody has tagged it with my adress.
>It looks like a virus so windows users, don't open it.
>I leave the few lines of headers below so you can see what it was.
>I'll recheck my mail logs but can't see how I would have submitted th is.
>I appologize for any incomvenience this may have caused to anyone,
>I don't have windows booted here and haven't for a day and
>a half.
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` TALMAGE
@ ` Charles Hallenbeck
0 siblings, 0 replies; 14+ messages in thread
From: Charles Hallenbeck @ UTC (permalink / raw)
To: speakup
I too have been plagued with a swarm of those things in the last
week or so. They all seem to have the same structure, but
different apparent senders and different subject lines, all
seeming very credible. There is an attachment that is usually
described with the mimetype audio/x-midi or audio/x-wav, but
which is really a DOS/Windows executable with extension .exe or
.scr
I got eight such items in a 24 hour period from my ex-wife's
return path address, all with the same structure but with
different apparent originators and subjects. Cindy is a Windows
user - it is a good thing we have accepted our differences or I
would be really upset at the wrong things! <smile>
Chuck
On Mon, 13 May 2002 TALMAGE@somtel.com wrote:
> Hi Kerry,
>
> Being the curious sort I ran McAfee on the file and here is what it had to
> say.
> Found the W32/Klez.e@MM virus !!!
> There must be a virus writers convention going on or something, I've
> gotten 7 or 8 in the last couple of weeks alone.
> Where is + 0400, Greenland?
>
> Dave
>
> At 10:30 PM 5/12/02 +0800, you wrote:
> >I didn't originate this,
> >somebody has tagged it with my adress.
> >It looks like a virus so windows users, don't open it.
> >I leave the few lines of headers below so you can see what it was.
> >I'll recheck my mail logs but can't see how I would have submitted th is.
> >I appologize for any incomvenience this may have caused to anyone,
> >I don't have windows booted here and haven't for a day and
> >a half.
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>
--
Visit me at http://www.valstar.net/~hallenbeck
The Moon is Waxing Crescent (1% of Full)
^ permalink raw reply [flat|nested] 14+ messages in thread
* Re: Run in DOS mode.
` Kerry Hoath
` (2 preceding siblings ...)
` TALMAGE
@ ` Rich Caloggero
` Alex Snow
` Igor Gueths
3 siblings, 2 replies; 14+ messages in thread
From: Rich Caloggero @ UTC (permalink / raw)
To: speakup
It was the Klez worm. I opened it and had to clean my system last night.
Could have been a lot worse.
Rich
----- Original Message -----
From: "Kerry Hoath" <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.
> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> >
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> --
> Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
>
>
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Rich Caloggero
@ ` Alex Snow
` Igor Gueths
1 sibling, 0 replies; 14+ messages in thread
From: Alex Snow @ UTC (permalink / raw)
To: speakup
This is about the 300th time I've got klez in about a month. Must be pretty
popular. Looking forward to finally getting linux running so I don't have
to worry as much about the virus threat. Wouldn't it be nice if gates built
antivirus software into winblows? But now that I think about it, would I
really trust any antivirus software from microsoft?
----- Original Message -----
From: "Rich Caloggero" <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.
> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
>
> Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Rich Caloggero
` Alex Snow
@ ` Igor Gueths
` Rich Caloggero
1 sibling, 1 reply; 14+ messages in thread
From: Igor Gueths @ UTC (permalink / raw)
To: speakup
Hi Rich. Got that shit on my laptop now I have to try and remove the strings that have been added into my word 6.0 docs. What did it do to your winblows system?
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.
> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
>
> Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Igor Gueths
@ ` Rich Caloggero
` David Poehlman
` Igor Gueths
0 siblings, 2 replies; 14+ messages in thread
From: Rich Caloggero @ UTC (permalink / raw)
To: speakup
It corrupted easy CD creator, some components of windows messaging which I
don't use, a piece of ms office, and maybe some other things which I can't
remember now. It could have been a lot worse -- I lucked out.
Rich
----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 3:53 PM
Subject: Re: Run in DOS mode.
Hi Rich. Got that shit on my laptop now I have to try and remove the strings
that have been added into my word 6.0 docs. What did it do to your winblows
system?
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.
> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
>
> Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Rich Caloggero
@ ` David Poehlman
` Igor Gueths
1 sibling, 0 replies; 14+ messages in thread
From: David Poehlman @ UTC (permalink / raw)
To: speakup
I've been fortunate to have had my protection not allow it to do any
damage in the many times I have downloaded it.
----- Original Message -----
From: "Rich Caloggero" <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 5:14 PM
Subject: Re: Run in DOS mode.
It corrupted easy CD creator, some components of windows messaging which
I
don't use, a piece of ms office, and maybe some other things which I
can't
remember now. It could have been a lot worse -- I lucked out.
Rich
----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 3:53 PM
Subject: Re: Run in DOS mode.
Hi Rich. Got that shit on my laptop now I have to try and remove the
strings
that have been added into my word 6.0 docs. What did it do to your
winblows
system?
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.
> It was the Klez worm. I opened it and had to clean my system last
night.
> Could have been a lot worse.
>
> Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted
th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
_______________________________________________
Speakup mailing list
Speakup@braille.uwo.ca
http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread* Re: Run in DOS mode.
` Rich Caloggero
` David Poehlman
@ ` Igor Gueths
1 sibling, 0 replies; 14+ messages in thread
From: Igor Gueths @ UTC (permalink / raw)
To: speakup
Hi Rich. Yeah it got my mp3s and word docs, now the fun part is attempting to remove the random strings and linefeeds from the docs? Not to mention the 5-10 mb mp3s.
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 5:14 PM
Subject: Re: Run in DOS mode.
> It corrupted easy CD creator, some components of windows messaging which I
> don't use, a piece of ms office, and maybe some other things which I can't
> remember now. It could have been a lot worse -- I lucked out.
>
> Rich
>
> ----- Original Message -----
> From: "Igor Gueths" <igueths@attbi.com>
> To: <speakup@braille.uwo.ca>
> Sent: Monday, May 13, 2002 3:53 PM
> Subject: Re: Run in DOS mode.
>
>
> Hi Rich. Got that shit on my laptop now I have to try and remove the strings
> that have been added into my word 6.0 docs. What did it do to your winblows
> system?
> ----- Original Message -----
> From: Rich Caloggero <rjc@MIT.EDU>
> To: <speakup@braille.uwo.ca>
> Sent: Monday, May 13, 2002 1:23 PM
> Subject: Re: Run in DOS mode.
>
>
> > It was the Klez worm. I opened it and had to clean my system last night.
> > Could have been a lot worse.
> >
> > Rich
> >
> > ----- Original Message -----
> > From: "Kerry Hoath" <kerry@gotss.net>
> > To: <speakup@braille.uwo.ca>
> > Sent: Sunday, May 12, 2002 10:30 AM
> > Subject: Re: Run in DOS mode.
> >
> >
> > > I didn't originate this,
> > > somebody has tagged it with my adress.
> > > It looks like a virus so windows users, don't open it.
> > > I leave the few lines of headers below so you can see what it was.
> > > I'll recheck my mail logs but can't see how I would have submitted th
> is.
> > > I appologize for any incomvenience this may have caused to anyone,
> > > I don't have windows booted here and haven't for a day and
> > > a half.
> > > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > > Content-Type: application/octet-stream;
> > > > name=about[1].html
> > > > Content-Transfer-Encoding: base64
> > > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > > >
> > > >
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > > --
> > > Kerry Hoath: kerry@gotss.net kerry@gotss.eu.org or
> > kerry@gotss.spice.net.au
> > > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> > >
> > >
> >
> >
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
>
>
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
^ permalink raw reply [flat|nested] 14+ messages in thread