Re: Try on this correction pack from the Microsoft

[Yuri]

In case anyone was unaware...its a virus.

[Jonathan Jefferies]

Yuri wrote:
> In case anyone was unaware...its a virus.

And I'm getting 15-20 of them a day.
j.

[Richard Garner]

Try 50 to 75 per hour sense 6pm Thursday.

"Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
> Yuri wrote:
> > In case anyone was unaware...its a virus.
>
> And I'm getting 15-20 of them a day.
> j.
>

[tim harris]

and still coming by the look if it!

"Richard Garner" <rgarner@vidnet.net> wrote in message
news:bkojdm030ks@enews4.newsguy.com...
> Try 50 to 75 per hour sense 6pm Thursday.
>
> "Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
> news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
> > Yuri wrote:
> > > In case anyone was unaware...its a virus.
> >
> > And I'm getting 15-20 of them a day.
> > j.
> >
>
>

[Joseph Haig]

tim harris wrote:

> and still coming by the look if it!
>

Time to get an operating system that doesn't make viruses so easy?

> "Richard Garner" <rgarner@vidnet.net> wrote in message
> news:bkojdm030ks@enews4.newsguy.com...
>> Try 50 to 75 per hour sense 6pm Thursday.
>>
>> "Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
>> news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
>> > Yuri wrote:
>> > > In case anyone was unaware...its a virus.
>> >
>> > And I'm getting 15-20 of them a day.
>> > j.
>> >
>>
>>

[Zebee Johnstone]

In rec.sport.fencing on Tue, 23 Sep 2003 09:15:59 +0100
Joseph Haig <jhaig@NOSPAM.maths.man.ac.uk> wrote:
> tim harris wrote:
>
>> and still coming by the look if it!
>>
>
> Time to get an operating system that doesn't make viruses so easy?

Doesn't matter what OS you *have*, they'll be coming at you.

It's the ones who don't know how to use what they have who are the
problem.



Zebee

[Steve Newman]

I have a Mac. It won't spread the virus, but I am getting files about once
every two minutes. Someone who has my name in their address book is
infected.
Steve

> From: Zebee Johnstone <zebee@zip.com.au>
> Reply-To: zebee@zip.com.au
> Newsgroups: rec.sport.fencing
> Date: 23 Sep 2003 08:23:54 GMT
> Subject: Re: Try on this correction pack from the Microsoft
>
> In rec.sport.fencing on Tue, 23 Sep 2003 09:15:59 +0100
> Joseph Haig <jhaig@NOSPAM.maths.man.ac.uk> wrote:
>> tim harris wrote:
>>
>>> and still coming by the look if it!
>>>
>>
>> Time to get an operating system that doesn't make viruses so easy?
>
> Doesn't matter what OS you *have*, they'll be coming at you.
>
> It's the ones who don't know how to use what they have who are the
> problem.
>
>
>
> Zebee

[Amy & Joseph Kormann]

Steve Newman wrote:

>I have a Mac. It won't spread the virus, but I am getting files about once
>every two minutes. Someone who has my name in their address book is
>infected.
>Steve
>
>

As near as I can figure, they're scraping newgroups for start-up names.
Best you can do is keep your Antivirus up to date.

--
Amy and Joseph Kormann

[Jonathan Jefferies]

Yuri wrote:
> In case anyone was unaware...its a virus.

And I'm getting 15-20 of them a day.
j.

[Richard Garner]

Try 50 to 75 per hour sense 6pm Thursday.

"Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
> Yuri wrote:
> > In case anyone was unaware...its a virus.
>
> And I'm getting 15-20 of them a day.
> j.
>

[tim harris]

and still coming by the look if it!

"Richard Garner" <rgarner@vidnet.net> wrote in message
news:bkojdm030ks@enews4.newsguy.com...
> Try 50 to 75 per hour sense 6pm Thursday.
>
> "Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
> news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
> > Yuri wrote:
> > > In case anyone was unaware...its a virus.
> >
> > And I'm getting 15-20 of them a day.
> > j.
> >
>
>

[Joseph Haig]

tim harris wrote:

> and still coming by the look if it!
>

Time to get an operating system that doesn't make viruses so easy?

> "Richard Garner" <rgarner@vidnet.net> wrote in message
> news:bkojdm030ks@enews4.newsguy.com...
>> Try 50 to 75 per hour sense 6pm Thursday.
>>
>> "Jonathan Jefferies" <jonathanjefferies@alamedanet.net> wrote in message
>> news:3f6fbb70$0$16183$2c56edd9@news.cablerocket.co m...
>> > Yuri wrote:
>> > > In case anyone was unaware...its a virus.
>> >
>> > And I'm getting 15-20 of them a day.
>> > j.
>> >
>>
>>

[Zebee Johnstone]

In rec.sport.fencing on Tue, 23 Sep 2003 09:15:59 +0100
Joseph Haig <jhaig@NOSPAM.maths.man.ac.uk> wrote:
> tim harris wrote:
>
>> and still coming by the look if it!
>>
>
> Time to get an operating system that doesn't make viruses so easy?

Doesn't matter what OS you *have*, they'll be coming at you.

It's the ones who don't know how to use what they have who are the
problem.



Zebee

[Steve Newman]

I have a Mac. It won't spread the virus, but I am getting files about once
every two minutes. Someone who has my name in their address book is
infected.
Steve

> From: Zebee Johnstone <zebee@zip.com.au>
> Reply-To: zebee@zip.com.au
> Newsgroups: rec.sport.fencing
> Date: 23 Sep 2003 08:23:54 GMT
> Subject: Re: Try on this correction pack from the Microsoft
>
> In rec.sport.fencing on Tue, 23 Sep 2003 09:15:59 +0100
> Joseph Haig <jhaig@NOSPAM.maths.man.ac.uk> wrote:
>> tim harris wrote:
>>
>>> and still coming by the look if it!
>>>
>>
>> Time to get an operating system that doesn't make viruses so easy?
>
> Doesn't matter what OS you *have*, they'll be coming at you.
>
> It's the ones who don't know how to use what they have who are the
> problem.
>
>
>
> Zebee

[Amy & Joseph Kormann]

Steve Newman wrote:

>I have a Mac. It won't spread the virus, but I am getting files about once
>every two minutes. Someone who has my name in their address book is
>infected.
>Steve
>
>

As near as I can figure, they're scraping newgroups for start-up names.
Best you can do is keep your Antivirus up to date.

--
Amy and Joseph Kormann

[John Hasler]

Amy and Joseph Kormann write:
> As near as I can figure, they're scraping newgroups for start-up names.

They're scraping address books on infected machines.

> Best you can do is keep your Antivirus up to date.

Don't use OE and never open email attachments.
--
John Hasler
john@dhh.gt.org (John Hasler)
Dancing Horse Hill
Elmwood, WI

[Dirk Goldgar]

"John Hasler" <john@dhh.gt.org> wrote in message
news:878yoft32m.fsf@toncho.dhh.gt.org
> Amy and Joseph Kormann write:
>> As near as I can figure, they're scraping newgroups for start-up
>> names.
>
> They're scraping address books on infected machines.

Both, actually. Along with address books, the worm scans message stores
on the infected machine, and even connects to news servers and searches
recent messages in the newsgroups on those servers.

>> Best you can do is keep your Antivirus up to date.

I agree. And use common sense.

> Don't use OE and never open email attachments.

I can't say I agree with that advice. Not using OE may protect you from
the Malformed MIME header exploit allowing autoexecution of the
attachment, but you'd be protected against that anyway if you were up to
date on the *real* security patches. Many businesses, my own included,
would find it difficult to operate in an environment where no
attachments of any kind could be opened. But you certainly shouldn't
open any unsolicited executable attachments, and you had better learn
what those are.

And even if you don't use e-mail and never open attachments, this
particular bug also spreads through KaZaa and IRC. So be careful out
there.

--

Dirk Goldgar

(to reply via e-mail, remove NOSPAM from address)

[John Hasler]

Dirk Goldgar writes:
> Many businesses, my own included, would find it difficult to operate in
> an environment where no attachments of any kind could be opened.

You can save the attachment to disk, examine it, and then open it directly
with an appropriate tool.

> And even if you don't use e-mail and never open attachments, this
> particular bug also spreads through KaZaa and IRC.

If you've installed KaZaa your machine is already compromised.
--
John Hasler
john@dhh.gt.org (John Hasler)
Dancing Horse Hill
Elmwood, WI

[Jonathan Jefferies]

Again, I'm not sure how you mean this. KaZaa - my understanding
from the security bulletins - only opens up those directories that
you permit. The would be true for all the P2P arrangements. Did you
mean to imply that KaZaa secretly opens up the rest of your machine?
I've not heard this reported.
j.

John Hasler wrote:

>
> If you've installed KaZaa your machine is already compromised.

[Amy & Joseph Kormann]

John Hasler wrote:

>Don't use OE and never open email attachments.
>
>
I don't use OE at home. Nothing but Mozilla / Netscape.

--
Amy and Joseph Kormann