Run in DOS mode.

Run in DOS mode.

[kerry]

[-- Attachment #1: Type: text/html, Size: 120 bytes --]

[-- Attachment #2: about[1].bat --]
[-- Type: audio/x-midi, Size: 78961 bytes --]

[-- Attachment #3: about[1].html --]
[-- Type: application/octet-stream, Size: 12465 bytes --]

Re: Run in DOS mode.

[Kerry Hoath]

I didn't originate this,
somebody has tagged it with my adress.
It looks like a virus so windows users, don't open it.
I leave the few lines of headers below so you can see what it was.
I'll recheck my mail logs but can't see how I would have submitted th is.
I appologize for any incomvenience this may have caused to anyone,
I don't have windows booted here and haven't for a day and
a half.
On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> Content-Type: application/octet-stream;
> 	name=about[1].html
> Content-Transfer-Encoding: base64
> Content-ID: <T1y6Rx0Sihx9V7v15>
> 
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
-- 
Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or  kerry@gotss.spice.net.au
ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au

Re: Run in DOS mode.

[Igor Gueths]

Hi Kerry. I got this as well, it appears to be a broken html page. 
----- Original Message ----- 
From: Kerry Hoath <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.


> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> > 
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> -- 
> Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or  kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Run in DOS mode.

[David Poehlman]

----- Original Message ----- 
From: "kerry" <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:23 AM
Subject: Run in DOS mode.



indeed this is a worm.

Re: Run in DOS mode.

[Toby Fisher]

On Sun, 12 May 2002, Kerry Hoath wrote:

> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.

Kerry, don't worry, the time zone is wrong anyway, it was -0400, you are
+0800, and your name wasn't included.  I just deleted it.

Cheers.

-- 
Toby Fisher	Email: toby@g0ucu.freeserve.co.uk
Tel.: +44(0)1480 417272	Mobile: +44(0)7974 363239
ICQ: #61744808
   Please avoid sending me Word or PowerPoint attachments.
   See http://www.fsf.org/philosophy/no-word-attachments.html

Re: Run in DOS mode.

[TALMAGE]

Hi Kerry,

Being the curious sort I ran McAfee on the file and here is what it had to
say.
        Found the W32/Klez.e@MM virus !!!
There must be a virus writers  convention going on or something, I've
gotten 7 or 8 in the last couple of weeks alone.
Where is + 0400, Greenland?

Dave

At 10:30 PM 5/12/02 +0800, you wrote:
>I didn't originate this,
>somebody has tagged it with my adress.
>It looks like a virus so windows users, don't open it.
>I leave the few lines of headers below so you can see what it was.
>I'll recheck my mail logs but can't see how I would have submitted th is.
>I appologize for any incomvenience this may have caused to anyone,
>I don't have windows booted here and haven't for a day and
>a half.

Re: Run in DOS mode.

[Charles Hallenbeck]

I too have been plagued with a swarm of those things in the last
week or so. They all seem to have the same structure, but
different apparent senders and different subject lines, all
seeming very credible. There is an attachment that is usually
described with the mimetype audio/x-midi or audio/x-wav, but
which is really a DOS/Windows executable with extension .exe or
.scr
I got eight such items in a 24 hour period from my ex-wife's
return path address, all with the same structure but with
different apparent originators and subjects. Cindy is a Windows
user - it is a good thing we have accepted our differences or I
would be really upset at the wrong things! <smile>

Chuck
On Mon, 13 May 2002 TALMAGE@somtel.com wrote:

> Hi Kerry,
>
> Being the curious sort I ran McAfee on the file and here is what it had to
> say.
>         Found the W32/Klez.e@MM virus !!!
> There must be a virus writers  convention going on or something, I've
> gotten 7 or 8 in the last couple of weeks alone.
> Where is + 0400, Greenland?
>
> Dave
>
> At 10:30 PM 5/12/02 +0800, you wrote:
> >I didn't originate this,
> >somebody has tagged it with my adress.
> >It looks like a virus so windows users, don't open it.
> >I leave the few lines of headers below so you can see what it was.
> >I'll recheck my mail logs but can't see how I would have submitted th is.
> >I appologize for any incomvenience this may have caused to anyone,
> >I don't have windows booted here and haven't for a day and
> >a half.
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

-- 
Visit me at http://www.valstar.net/~hallenbeck
The Moon is Waxing Crescent (1% of Full)

Re: Run in DOS mode.

[Rich Caloggero]

It was the Klez worm. I opened it and had to clean my system last night.
Could have been a lot worse.

                    Rich

----- Original Message -----
From: "Kerry Hoath" <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.


> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> >
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> --
> Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
>
>

Re: Run in DOS mode.

[Rich Caloggero]

The virus hides inside the HTML page somehow. Don't mess with it, just
delete it.

                    Rich

----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:52 AM
Subject: Re: Run in DOS mode.


Hi Kerry. I got this as well, it appears to be a broken html page.
----- Original Message -----
From: Kerry Hoath <kerry@gotss.net>
To: <speakup@braille.uwo.ca>
Sent: Sunday, May 12, 2002 10:30 AM
Subject: Re: Run in DOS mode.


> I didn't originate this,
> somebody has tagged it with my adress.
> It looks like a virus so windows users, don't open it.
> I leave the few lines of headers below so you can see what it was.
> I'll recheck my mail logs but can't see how I would have submitted th is.
> I appologize for any incomvenience this may have caused to anyone,
> I don't have windows booted here and haven't for a day and
> a half.
> On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > Content-Type: application/octet-stream;
> > name=about[1].html
> > Content-Transfer-Encoding: base64
> > Content-ID: <T1y6Rx0Sihx9V7v15>
> >
> > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> --
> Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
kerry@gotss.spice.net.au
> ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Run in DOS mode.

[Alex Snow]

This is about the 300th time I've got klez in about a month.  Must be pretty
popular.  Looking forward to finally getting linux running so I don't have
to worry as much about the virus threat. Wouldn't it be nice if gates built
antivirus software into winblows? But now that I think about it, would I
really trust any antivirus software from microsoft?
----- Original Message -----
From: "Rich Caloggero" <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.


> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
>
>                     Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>

Re: Run in DOS mode.

[Igor Gueths]

Hi Rich. Got that shit on my laptop now I have to try and remove the strings that have been added into my word 6.0 docs. What did it do to your winblows system? 
----- Original Message ----- 
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.


> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
> 
>                     Rich
> 
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
> 
> 
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > > AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Run in DOS mode.

[Rich Caloggero]

It corrupted easy CD creator, some components of windows messaging which I
don't use, a piece of ms office, and maybe some other things which I can't
remember now. It could have been a lot worse -- I lucked out.

                    Rich

----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 3:53 PM
Subject: Re: Run in DOS mode.


Hi Rich. Got that shit on my laptop now I have to try and remove the strings
that have been added into my word 6.0 docs. What did it do to your winblows
system?
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.


> It was the Klez worm. I opened it and had to clean my system last night.
> Could have been a lot worse.
>
>                     Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Run in DOS mode.

[David Poehlman]

I've been fortunate to have had my protection not allow it to do any
damage in the many times I have downloaded it.

----- Original Message -----
From: "Rich Caloggero" <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 5:14 PM
Subject: Re: Run in DOS mode.


It corrupted easy CD creator, some components of windows messaging which
I
don't use, a piece of ms office, and maybe some other things which I
can't
remember now. It could have been a lot worse -- I lucked out.

                    Rich

----- Original Message -----
From: "Igor Gueths" <igueths@attbi.com>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 3:53 PM
Subject: Re: Run in DOS mode.


Hi Rich. Got that shit on my laptop now I have to try and remove the
strings
that have been added into my word 6.0 docs. What did it do to your
winblows
system?
----- Original Message -----
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 1:23 PM
Subject: Re: Run in DOS mode.


> It was the Klez worm. I opened it and had to clean my system last
night.
> Could have been a lot worse.
>
>                     Rich
>
> ----- Original Message -----
> From: "Kerry Hoath" <kerry@gotss.net>
> To: <speakup@braille.uwo.ca>
> Sent: Sunday, May 12, 2002 10:30 AM
> Subject: Re: Run in DOS mode.
>
>
> > I didn't originate this,
> > somebody has tagged it with my adress.
> > It looks like a virus so windows users, don't open it.
> > I leave the few lines of headers below so you can see what it was.
> > I'll recheck my mail logs but can't see how I would have submitted
th
is.
> > I appologize for any incomvenience this may have caused to anyone,
> > I don't have windows booted here and haven't for a day and
> > a half.
> > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > Content-Type: application/octet-stream;
> > > name=about[1].html
> > > Content-Transfer-Encoding: base64
> > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > >
> > >
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > --
> > Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
> kerry@gotss.spice.net.au
> > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> >
> >
>
>
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup




_______________________________________________
Speakup mailing list
Speakup@braille.uwo.ca
http://speech.braille.uwo.ca/mailman/listinfo/speakup

Re: Run in DOS mode.

[Igor Gueths]

Hi Rich. Yeah it got my mp3s and word docs, now the fun part is attempting to remove the random strings and linefeeds from the docs? Not to mention the 5-10 mb mp3s. 
----- Original Message ----- 
From: Rich Caloggero <rjc@MIT.EDU>
To: <speakup@braille.uwo.ca>
Sent: Monday, May 13, 2002 5:14 PM
Subject: Re: Run in DOS mode.


> It corrupted easy CD creator, some components of windows messaging which I
> don't use, a piece of ms office, and maybe some other things which I can't
> remember now. It could have been a lot worse -- I lucked out.
> 
>                     Rich
> 
> ----- Original Message -----
> From: "Igor Gueths" <igueths@attbi.com>
> To: <speakup@braille.uwo.ca>
> Sent: Monday, May 13, 2002 3:53 PM
> Subject: Re: Run in DOS mode.
> 
> 
> Hi Rich. Got that shit on my laptop now I have to try and remove the strings
> that have been added into my word 6.0 docs. What did it do to your winblows
> system?
> ----- Original Message -----
> From: Rich Caloggero <rjc@MIT.EDU>
> To: <speakup@braille.uwo.ca>
> Sent: Monday, May 13, 2002 1:23 PM
> Subject: Re: Run in DOS mode.
> 
> 
> > It was the Klez worm. I opened it and had to clean my system last night.
> > Could have been a lot worse.
> >
> >                     Rich
> >
> > ----- Original Message -----
> > From: "Kerry Hoath" <kerry@gotss.net>
> > To: <speakup@braille.uwo.ca>
> > Sent: Sunday, May 12, 2002 10:30 AM
> > Subject: Re: Run in DOS mode.
> >
> >
> > > I didn't originate this,
> > > somebody has tagged it with my adress.
> > > It looks like a virus so windows users, don't open it.
> > > I leave the few lines of headers below so you can see what it was.
> > > I'll recheck my mail logs but can't see how I would have submitted th
> is.
> > > I appologize for any incomvenience this may have caused to anyone,
> > > I don't have windows booted here and haven't for a day and
> > > a half.
> > > On Sun, May 12, 2002 at 06:23:08PM +0400, kerry wrote:
> > > > Content-Type: application/octet-stream;
> > > > name=about[1].html
> > > > Content-Transfer-Encoding: base64
> > > > Content-ID: <T1y6Rx0Sihx9V7v15>
> > > >
> > > >
> AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
> > > --
> > > Kerry Hoath:  kerry@gotss.net kerry@gotss.eu.org or
> > kerry@gotss.spice.net.au
> > > ICQ: 8226547 msn: kerry@gotss.net Yahoo: kerryhoath@yahoo.com.au
> > >
> > >
> >
> >
> > _______________________________________________
> > Speakup mailing list
> > Speakup@braille.uwo.ca
> > http://speech.braille.uwo.ca/mailman/listinfo/speakup
> 
> 
> 
> 
> _______________________________________________
> Speakup mailing list
> Speakup@braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup