There are 14 messages totalling 715 lines in this issue. Topics of the day: 1. How can I receive a large file through Juno? 2. Problem with decoding files. 3. FTPMail, Agora, etc. statistics 4. About E-mail Forwarders... (2) 5. The Happy '99 Story 6. Www4Mail servers' maintainers 7. Happy99.Exe - what to do about it 8. ACCMAIL Digest - 12 Mar 1999 to 13 Mar 1999 (#1999-73) 9. Happy99 10. I like WwwFetch! 11. Infested ACCMAIL Digest 12. <No subject given> 13. uudecode/base64 encoding: a draft for a survey. ~~~~~~~~~~~~~~~ ACCMAIL Info (automatically generated) ~~~~~~~~~~~~~~ To UNSUBscribe: Send UNSUBSCRIBE ACCMAIL to [EMAIL PROTECTED] To get the ACCMAIL FAQ: Send e-mail to "[EMAIL PROTECTED]" and enter only this line in the BODY of the note: send usenet/news.answers/internet-services/access-via-email ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ---------------------------------------------------------------------- Date: Tue, 16 Mar 1999 22:19:47 EST From: Rich Prutzer <[EMAIL PROTECTED]> Subject: Re: How can I receive a large file through Juno? If you are a member of the Juno accmail list, there is a juno accmail project where you can get help downloading files too large for the Juno mailbox. To subscribe send an email to [EMAIL PROTECTED] with"subscribe juno_accmail <your email address>"in the BODY of your message. Once subscribed, send an email to [EMAIL PROTECTED] with "send projecthelp" in the SUBJECT of your message. Leave the body of the message blank. Rich <Recently I've been trying to get a digest <from one of the email lists I'm on. <I have Juno, and each time I try to get <this particular file, Juno says it's too big. ------------------------------ Date: Tue, 16 Mar 1999 22:18:37 -0500 From: "Dr. Jorge R. Fernandez" <[EMAIL PROTECTED]> Subject: Re: Problem with decoding files. Hi Azeem, > I have downloaded a binary file from a HTTP server using the server >[EMAIL PROTECTED] It came in 5 zipped files, numbered as >ITSDiag_zip4.zip >ITSDiag_zip1.zip >ITSDiag_zip2.zip >ITSDiag_zip3.zip >ITSDiag_zip.zip. >How do >I combine them ? 1. Save those files in a folder, and name them as you want, say: 1,2,3,4 and 5 (doesn't matter the name that you give to the files). 2. Go to MS-Dos windows, and cd to the folder you saved the files. 3. Type: copy /b 1+2+3+4+5 ITSDiag.zip IT'S VERY IMPORTANT THE SWITCH /b. Those files are binaries. 4. Unzip the ITSDiag.zip file, and voila!!! BTW, I got that file early in the morning through the same server, and did those steps. ITSDiag is functioning OK in my PC. I hope this help. ----------------------------------------------------------- Dr. Jorge R. Fernández Massó Hospital Hijas de Galicia e-mail: [EMAIL PROTECTED] ------------------------------ Date: Wed, 17 Mar 1999 06:01:19 GMT From: [EMAIL PROTECTED] Subject: FTPMail, Agora, etc. statistics FTPMail, Agora, etc. statistics for Tue 16 Mar 1999, posted Wed 17 Mar, 06:00 GMT/BST Less than 1 hour [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] 1-4 hours [EMAIL PROTECTED] [EMAIL PROTECTED] 4-10 hours None More than 10 hours None Response within 4 hours in at least 5 out of 7 recent tests [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] This data is generated automatically around 0600 GMT/BST most days. The performance reported is dependant on many factors and your experience may vary. You can also access this list: On the Web at http://www.netservs.com/mrcool/stats.htm By FTP at ftp://ftp.cix.co.uk/pub/net-services/stats.txt Mail to [EMAIL PROTECTED] and say "get file stats.txt" (no quotes) Want this list every day? Send mail to [EMAIL PROTECTED] and in the body of your message put "join statistics" (no quotes) No liability is accepted for inaccuracies. Mirroring, links to and copying of this entire file (not extracts) is permitted until further notice. Slow downloads? Try Mr. Cool! See http://www.netservs.com/mrcool/ Copyright Net Services 1999. ------------------------------ Date: Wed, 17 Mar 1999 11:00:18 EDT From: Shahram Amiri <[EMAIL PROTECTED]> Subject: About E-mail Forwarders... Hi all, I have recently signed up in iName.com for an e-mail forwarder, so now anybody can write to me through my new iName address. But , I want to know if it is possible to send e-mails through the new address? In other words I want to know if there is any way sending e-mail to someone and my iName-Forwarder address be showed for him instead of my real address? If it is not possible with iName service, do you know any other free e-mail based service that I can use for such a work? Thanx. [EMAIL PROTECTED] [EMAIL PROTECTED] http://InternetTrash.com/users/Shahram ------------------------------ Date: Wed, 17 Mar 1999 09:41:58 -0500 From: Jose LLufrio <[EMAIL PROTECTED]> Subject: The Happy '99 Story About Happy '99 Virus The following article was distributed within the net of the Ministry of = Culture in Cuba. It has been prepared by the Latin American Laboratory = for Protection against Computer Viruses (Segurmatica), based in Havana. Even though it is rather lengthy, and it might be considered = "off-topic", I think subscribers of this wonderful list should be = educated on how to recognize and how to eliminate (even without a = commercial anti-virus) this troublesome "Trojan". Here it goes, verbatim: HAPPY '99 TROJAN By Eng.Edgar Guadis Salazar Head of Virus Laboratory HAPPY99 is a Win32 application, that once installed inside a computer, = it is capable of propagating as an attachment included in e-mail = messages or newspostings sent by the unaware user. The installation and propagation process occur in a manner hidden from = the user, who only sees a New Year's greeting, thence it can be = classified as a "trojan". It is important to remark that the virus can only be installed if the = user runs the HAPPY99.EXE program, either directly from the message on = which it was received or from a copy in the hard disk or a diskette. Description: When the recipient of the message with the HAPPY99.EXE attachment runs = the program (it is a file named HAPPY99.EXE 10.000 bytes long), in a = Windows 95/98 computer, all you see is an animated screen display of = fireworks in a window titled "Happy New Year 1999". Simultaneously the = trojan virus installs itself in the system, performing the following = actions: 1.- In the system folder \Windows\System\, Copies itself under the name SKA.EXE, Creates a DLL named SKA.DLL, Makes a copy of the DLL WSOCK32:DLL under the name WSOCK32.SKA, Overwrites and modifies the DLL WSOCK32.DLL 2.- In case WSOCK32.DLL cannot be modified because it is in use, It then modifies the system records: \HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce SKA.EXE with the purpose that this program is run every time the system is = initialized. The modification to WSOCK32.DLL consists in adding some code at the end = of the .text section, without changing the file size, to serve as a = pointer for the "connect" and "send" commands that export the DLL to = these routines. This means that every time an application is run, which = imports these functions from WSOCK32.DLL, the code added by the trojan = will be executed. When the user runs a program like Outlook Express, WSOCK32.DLL is = activated, and the trojan controls the events "connection" and "data = sending", monitoring the SMTP and NNTP ports (for e-mail and news = respectively). As the trojan detects a conection to any of these ports, = it loads SKA.DLL, which exports the functions "mail" and "news". = Depending on the port, it creates a new message, to which a copy of = HAPPY99.EXE is attached, and sends it to the address selected by the = user. The trojan keeps a record of the addresses in a text file LISTE.SKA = inside \Windows\System\ so it will not send the attachment to the same = address twice. How to Eliminate the Virus? Manually: 1.- Close all applications that are used for Internet connection. 2.- Using the Windows Explorer go to the folder \Windows\System\. 3.- Delete the files: SKA.EXE SKA.DLL WSOCK32.DLL 4.- Rename the file WSOCK32.SKA as WSOCK32.DLL 5.- Using the facility file search in Explorer, search for the file = HAPPY99.EXE and delete. 6.- Using the Windows program REGEDIT.EXE, check if the entry \HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce has any reference to the file SKA.EXE. In case it does, delete such = reference, to avoid getting a message on screen every time you start = your computer, informing no such program can be found. How to Protect Yourself? With the aid of Windows Explorer, modify the properties of WSOCK32.DLL = file, making it read only. The programmer of the trojan didn't take this = possiblity into account, and writing into this file plays an important = role in propagating it. It will not be able to do so even if the rest of = the installation process takes place. Do not run the attachment HAPPY99.EXE, and do not copy to hard disk. Conclusions. Rather than showing how vulnerable a Windows 95/98 computer is, the = lesson is that this program cannot be installed by itself. It is neccessary that the user activates it by running HAPPY99.EXE. Once again it can be shown that no software should be run or installed = when received by e-mail or downloaded from Internet, unless received = from a trustworthy source. Note: Version 8.02 Beta of SAV.EXE, antivirus program from Segurmatica, = Havana, detects and erases the HAPPY99.EXE trojan virus. This Beta version can be obtained from: <[EMAIL PROTECTED]> Translated from Spanish by: Jose E. Llufrio <[EMAIL PROTECTED]> ------------------------------ Date: Tue, 16 Mar 1999 23:28:27 +0100 From: [EMAIL PROTECTED] Subject: Www4Mail servers' maintainers Hello, I wrote on this list some days ago, because no www4mail server seemed/seems to be responding to any of my requests. Now, since no one seems to guess successfully what's going on with it (though somehow the problem sounds shared by others as well), I'd ask you the address of the www4mail servers' maintainers, so as to "complain" directly with them about that. (I think those addresses are somewhere in the help files, but, you know, I can't get those ones either) Thanks for your courtesy, Elek ------------------------------ Date: Tue, 16 Mar 1999 22:06:47 PST From: "Jerel D. Arbaugh" <[EMAIL PROTECTED]> Subject: Re: Happy99.Exe - what to do about it }Date: Tue, 16 Mar 1999 20:15:07 +0500 }From: Rajan <[EMAIL PROTECTED]> } }Hi! } }I had been reading about the Happy99.Exe Worm and one came with ACCMAIL }Digest - 12 Mar 1999 to 13 Mar 1999 (#1999-73)! } AGAIN I say: the only part of happy99 worm that was in the Accmail Digest was a UU header, with NO body. hard to infect a system that way. It did likely truncate the digest for some readers. ... } }I had posted something on Happy99.Exe on ACCMAIL and it was in the digest a }few days ago. For those interested in doing something about getting rid of }this go to:- } }http://www.3inet.com/ } } }They have a batch file called clean99.bat which is supposed to detect and }bust this worm. For those using Win 3.1/95/98/ -- the batch file is to be }run in DOS mode ie. boot in DOS mode and run it. } }Hope the one on this list who has the Happy99.Exe worm runs this and gets }rid of it! (Remember, once it is in your PC you will not know that it keeps }sending copies of itself along with your email as an attachment). What }other damage it does I don't know. } }Rajan }16-3-99 } }------------------------------ This other info looks good. I understand that the worm creates a renamed copy of itself in the system directory, and if you do not have a needed DLL, it extracts one from itself. The simple cure is deleting the .EXE file, but not the .DLL, in case some thing else on the system uses it. -- | [EMAIL PROTECTED] Jerel. --- ------------------------------ Date: Wed, 17 Mar 1999 08:31:11 +0200 From: Uzi Paz <[EMAIL PROTECTED]> Subject: Re: ACCMAIL Digest - 12 Mar 1999 to 13 Mar 1999 (#1999-73) > Date: Wed, 17 Mar 1999 02:11:41 +0600 > From: [EMAIL PROTECTED] > > How big is 'Happy99.exe'? I got it with my ACCMAIL posts - size 1kb. > > Sen It is posted in a uuencoded format, I once checked and the minimum number of lines on a message with the Happy99 in it, is a bit over 230 lines. (If I rememvber correctly, the size is 10K when decoded, so it is about 13Kb-14Kb in size when in a uuencoded format). On my list (Help-Net) which is not moderated, I set the maximum number of lines to 225, and in this way, the happy99 will be rejected automatically by LISTSERV as exceeding the maximum number of lines. 225 lines are quite enough for most types of mailing lists, and I recommend all LISTSEV list owners (of unmoderated lists) to consider this setting. Uzi ------------------------------ Date: Wed, 17 Mar 1999 04:05:40 +0000 From: Cassio Roberto <[EMAIL PROTECTED]> Subject: Happy99 Problems with Happy99?? See Happy99Cleaner: http://craig.medill.nwu.edu/happy99/Happy99Cleaner.exe Cassio Roberto ------------------------------ Date: Tue, 16 Mar 1999 19:56:30 +0800 From: Runner <[EMAIL PROTECTED]> Subject: I like WwwFetch! Hi,everyone, The WwwFetch server is down, do you know any other similar server? If you know, do please tell me. I like this kind of service very much. I'm sorry for my poor English. Best wishes, ************************************** Runner [EMAIL PROTECTED] ************************************** ------------------------------ Date: Wed, 17 Mar 1999 20:22:55 +0200 From: Uzi Paz <[EMAIL PROTECTED]> Subject: Re: About E-mail Forwarders... > Date: Wed, 17 Mar 1999 11:00:18 EDT > From: Shahram Amiri <[EMAIL PROTECTED]> > > I have recently signed up in iName.com for an e-mail forwarder, so > now anybody can write to me through my new iName address. But , I want > to know if it is possible to send e-mails through the new address? > > In other words I want to know if there is any way sending e-mail to someone and > my iName-Forwarder address be showed for him instead of my real address? Most of the e-mail programs allow you to set the identity to whatever you want, and you may set it to your address at INAME. The address will appear both in the "From:" field, and in the return-path. People who will check the full header of your messages will find, however, in the "received:" fields the address of the real server that generated the message. Uzi ------------------------------ Date: Wed, 17 Mar 1999 09:09:03 -0000 From: Gerald England <[EMAIL PROTECTED]> Subject: From [EMAIL PROTECTED] Thu Mar 18 06:49:01 1999 Return-Path: <[EMAIL PROTECTED]> Received: from wierdlmpc.msci.memphis.edu (wierdlmpc.msci.memphis.edu [141.225.11.87]) by jab.org (8.8.7/8.8.7) with SMTP id EAA06556 for <archive@jab.org>; Thu, 18 Mar 1999 04:24:33 -0500 Received: (qmail 30169 invoked by uid 514); 18 Mar 1999 09:26:11 -0000 Precedence: bulk Delivered-To: mailing list [EMAIL PROTECTED] Received: (qmail 30160 invoked by uid 514); 18 Mar 1999 09:26:10 -0000 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm List-Unsubscribe: <mailto:[EMAIL PROTECTED]> Delivered-To: mailing list [EMAIL PROTECTED] X-num: 3902 Message-Id: <[EMAIL PROTECTED]> From: "Asger Alstrup Nielsen" <[EMAIL PROTECTED]> To: "LyX Developers" <[EMAIL PROTECTED]> Subject: Re: Question Date: Thu, 18 Mar 1999 09:58:01 +0100 X-MSMail-Priority: Normal X-Priority: 3 X-Mailer: Microsoft Internet Mail 4.70.1157 MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit > "Why are there 14 different encoding objects that basically do the > same? Because there are 14 different encoding objects that basically look the same. > Couldn't there be just one and some external "code tables" in > plain ASCII files thus reducing compile time and binary size while > increasing flexibility (a new encoding is a new file, no recompilation > etc)" Yes, but then we would have N times the wait of loading external code tables, rather than 1 time the waiting for compilation of the 14 files. You don't have to start LyX many times before you have saved time (not to mention the time needed to write and debug the parser for the external encoding files.) Also, the size issue is wrong: Having an external file will require more space, because you need both the data and then a parser for the data on top of that. Also, the size of all of these 14 encoding files is less than 20k, if you compile with -O2, and -fno-exceptions. I think we can afford that considering what we get. The current approach is the simplest one, and that's the main reason for doing things like this. We don't really need dynamically loaded encodings, IMO. Did that answer your question? Greets, Asger Re: Infested ACCMAIL Digest I get the mime digest It showed up there as an attachment to one of the emails. After reading the other messages I just deleted the whole thing. It may well be that, as some have said, only the begin line was there, not the actual virus but I didn't check. So long as no one actually executed it on their computer they should be OK. It would be wrong to ban the sender altogether as they might not be aware that they had sent it. They should be made aware of the problem though and take steps to remove it before sending further mail. I got the virus sent personally by a lady using a computer belonging to some "Internet Centre" in Bulgaria. I emailed her details of how to eliminate the virus and a few days later I got a snail-mail from her saying she felt so guilty and would not be going back to the Centre. I've urged her to go back and tell them so they can correct it (though I suspect someone else will have told them by now). This virus is relatively harmless in that you can avoid it by not running the program when you get it and it is not too difficult to remove it from infected computers. The real damage is to the confidence of new computer users such as my friend in Bulgaria. yours Gerald Gerald, Christine and Craig England, New Hope International Publications, Haiku Talk, NHI Review, Aabye's Baby, Zimmerzine, Netmiser. http://www.nhi.clara.net/index.htm -----Original Message----- From: Jerel D. Arbaugh <[EMAIL PROTECTED]> Date: 16 March 1999 18:25 Subject: Re: Infested ACCMAIL Digest >}Date: Mon, 15 Mar 1999 08:45:18 -0000 >}From: Gerald England <[EMAIL PROTECTED]> > >} >}it would appear that the mail containing the happy99 virus >}which was sent to the list will now be in the archives. >} > >This is getting strange: The only copy of happy99 that I have seen on >this list, was a begin line for the UU-encoded worm, with no body. Did I >miss a digest? >-- >| [EMAIL PROTECTED] Jerel. >--- > ------------------------------ Date: Wed, 17 Mar 1999 18:49:05 +0100 From: Jan Wagemakers <[EMAIL PROTECTED]> Subject: <No subject given> Hello, I have tried to download 'http://asmjournal.freeservers.com/apj_3.txt' by making use of www2E-mail-servers. But it seems that I can not download this file. Is it possible to download this file by E-mail? ------------------------------------------------------------------------------- >From [EMAIL PROTECTED] Wed Mar 17 18:42:37 1999 Date: Sun, 14 Mar 1999 16:32:16 +0000 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: URL: http://asmjournal.freeservers.com/apj_3.txt IFRAME: [1]http://adex3.flycast.com/server/socket/127.0.0.1:2800/iframe/FreeSe rvers/FreeserversNetwork/123 [2][123] Forbidden You do not have permission to access http://asmjournal.freeservers.com/apj_3.txt Binary files stored on FreeServers must be accessed by a local link on a FreeServers user web page. If you think there is an error, please take the time to notify [3][EMAIL PROTECTED] Thank you for using [4]Free Servers. References Visible links: 1. http://adex3.flycast.com/server/socket/127.0.0.1:2800/iframe/FreeServers/FreeserversNetwork/123 2. http://www.freeservers.com/cgi-bin/click.cgi/HBAMAMDN?http://adex3.flycast.com/server/socket/127.0.0.1:2800/click/FreeServers/FreeserversNetwork/123 3. mailto:[EMAIL PROTECTED] 4. http://www.freeservers.com/ Hidden links: 5. http://asmjournal.freeservers.com/apj_3.txt ------------------------------------------------------------------------------- Regards - Jan Wagemakers - Internet : [EMAIL PROTECTED] | http://bewoner.dma.be/JanW (Linux & Assembler) Fidonet : 2:292/854.19 ------------------------------ Date: Wed, 17 Mar 1999 22:37:29 +0200 From: Uzi Paz <[EMAIL PROTECTED]> Subject: uudecode/base64 encoding: a draft for a survey. I wish to make a survey, about levels of accessibility and support for uuencoded/Base64 MIME encoded files. At the moment, I do not wish people to answer the survey. I wrote below a draft for the survey, and I wish to know if there are suggestions to improve the survey, or problems in the draft itself. I WOULD APPRECIATE ANY SUGGESTIONS AND COMMENTS ABOUT THE DRAFT BELOW. PLEASE DO NOT ANSWER THE SURVEY ITSELF. IT IS STILL A DRAFT !!! Here is the current draft for the survey: -------------- The Current draft for the survey -------------------------- I would be very greatful if as many people as possible will participate in the survey, so I would be very greatful if anyone of you will participate. If enough people will respond, I shall give here a statistical summary of the results. Please reply with your answers to the address: [EMAIL PROTECTED] . Do not use any other address for your responses to the survey (I set the reply-to accordingly). Please quote each question, and give the answer on a seperate line below the question. For all the questions below, if you choose the "Other" option, please explain. Here is the survey: 1. Do you use a service that provides you an e-mail only Access to the Internet? [yes/no] (if the answer is no please skip the rest of the survey) 2. Do you have a direct connection to the WWW from the same computer where you have the service you referred to in question number 1 ? (should be a different service) [yes/no] (If the answer is yes, then the rest of the questions are reffering to the e-mail only service) 3. What is the type of the e-mail only service that you use, [(A) - a public commercial service / (B) - a public non-commercial service / (C) - a private service / (D) Other __(please explain in what mean)] (Please note, that an account that belongs to your work / university / / school, should be treated as a private service. Note: a service which is advertisements supported is still a commercial service even if it is free). 4. If the answer to Q3 is (A) or (B) please give the name of the service. 5. Does the service uses UUCP? [Yes/No/Unknown] 6. Do you have the authorization to install software on the computer from where you have access to e-mail? [Yes/No/Somewhat_limited/Very_Limited/Other] 7. Do you have limit for the amount of e-mail that can wait for you to download [Yes/No]. 8. If the answer to Q7 is yes, please specify the limit. 9. Do you have limit on the size of a message that you receive? 10. Does the e-mail system that you use allow you to receive Base64 MIME attachments? 11. Is the e-mail program that you use, able to handle MIME attachments? 12. Does the e-mail system that you use allow you to receive uuencoded messages? 13. Does your e-mail program have a builtin uudecoder? 14. Do you have a utility which allow you to handle uuencoded files? 15. Do you have a utility which allow you to handle MIME (Base64) encoded files? 16. Which platform/operating system do you use for this service (choose one or more) [Win3x/MSDOS/MacOs/Win95/WinNT/Unix/Linux/Win98/Terminal]? Thanks Uzi ---------- end of the draft for the survey ------------- ---------- Do not answer the survey itself ------------ Any comments would be appreciate. Uzi ------------------------------ End of ACCMAIL Digest - 16 Mar 1999 to 17 Mar 1999 (#1999-77) *************************************************************