Re: strange unknown executable

2001-06-26 Thread Paul Walker
On Mon, Jun 25, 2001 at 08:38:39PM +0100, Chris White wrote:

> i was speaking from experince , and i had the same EXE , (diff name)sent to
> me over 12 months ago , and my virus softy didn't detect it., and it did
> need a fdisk

Then you need to upgrade your AV program to a decent one, not run fdisk. All
fdisk will do is rewrite the MBR, and any half-way competent antivirus
program can do that.

-- 
Paul

"It stands for 'Sales and Marketing', you depraved monkeys."
"A rose by any other name, Stef." - http://www.userfriendly.org/


RE: strange unknown executable

2001-06-25 Thread Chris White
i was speaking from experince , and i had the same EXE , (diff name)sent to
me over 12 months ago , and my virus softy didn't detect it., and it did
need a fdisk

Run it , if you don;t believe me

C


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Paul Walker
Sent: 25 June 2001 20:27
To: sam-users@nvg.ntnu.no
Subject: Re: strange unknown executable


On Sun, Jun 24, 2001 at 05:57:34PM +0100, Chris White wrote:

> It contains one of the nastiest thing on net @ moo , a Bot , this will
stay
> on your machine , and only known cure is to FDisk. What it does is well

Uh ... rubbish. The best cure is just a decent anti-virus program.

--
Paul




Re: strange unknown executable

2001-06-25 Thread Paul Walker
On Sun, Jun 24, 2001 at 05:57:34PM +0100, Chris White wrote:

> It contains one of the nastiest thing on net @ moo , a Bot , this will stay
> on your machine , and only known cure is to FDisk. What it does is well

Uh ... rubbish. The best cure is just a decent anti-virus program.

-- 
Paul


Re: strange unknown executable

2001-06-25 Thread Dean Liversidge
On Sun, 24 Jun 2001 17:57:34 +0100, you wrote:

>Its is a Virus , and normal course for these types is it appears with TXT
>saying , " Piccys" . It is also normally sent after a real email is sent
>, so that would indicate WomoTeam
>
>It contains one of the nastiest thing on net @ moo , a Bot , this will stay
>on your machine , and only known cure is to FDisk. What it does is well
>written all over net , best place to read about this stuff is http://grc.com
>
>Well that woke up the list

well, not quite as bad as the fdisk, but its jsut a bit messy if it
gets ahold of your winsock.
(removal info
http://www.symantec.com/avcenter/venc/data/w95.hybris.gen.html)

but hey, if anyones dumb enough to run an exe with a filename of
KHJCLJKH.EXE, then i recon they deserve everything they get ;o), but
its even funnier when people run the ones that say.. heres the file
you wanted ... du... what file... did i ask for a file i dont
think so :)

I blame microsoft for a lot of virus infestations... if they didnt
default to hide file extension, so many people wouldnt get sucked into
running things they thought were something they arnt... well, a few
people might not anyway well, probably none of the clever sales
people at work though !! :O)


-- 
Dean Liversidge

[EMAIL PROTECTED]


RE: strange unknown executable

2001-06-24 Thread Chris White
Its is a Virus , and normal course for these types is it appears with TXT
saying , " Piccys" . It is also normally sent after a real email is sent
, so that would indicate WomoTeam

It contains one of the nastiest thing on net @ moo , a Bot , this will stay
on your machine , and only known cure is to FDisk. What it does is well
written all over net , best place to read about this stuff is http://grc.com

Well that woke up the list

C


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Colin Piggot
Sent: 24 June 2001 12:31
To: sam-users@nvg.ntnu.no
Subject: Re: strange unknown executable


> Did anyone else get this executable with this mail header There's no
way
> in hell I'm going to run it!

Yes, i got it too... it got trashed straight away!

Colin

Quazar : Hardware and Software for the Sam
http://www.quazar.clara.net/sam/






Re: strange unknown executable

2001-06-24 Thread Paul Walker
On Sun, Jun 24, 2001 at 06:18:42PM +0200, [EMAIL PROTECTED] wrote:

> According to a service called Spamcop the message traces back to the 
> folowing email address:
> 
> [EMAIL PROTECTED]

All that tells you is the email address responsible for the originating
network. It doesn't tell you who sent the email to start with. 

And in this case, SpamCop got it wrong; that's much more likely to be
someone responsible for nvg.ntnu.no, since the email originated from a
German ISP.

ie don't send abuse reports to that address. ;-)

-- 
Paul

"Computers may be stupid, but they're always obedient. Well, almost always."
  -- Larry Wall (Open Sources, 1999 O'Reilly and Associates)


Re: strange unknown executable

2001-06-24 Thread egmond
According to a service called Spamcop the message traces back to the 
folowing email address:

[EMAIL PROTECTED]

Does anyone know this person?
Frans



>> Did anyone else get this executable with this mail header There's
>> no way in hell I'm going to run it!
> 
> Yes, i got it too... it got trashed straight away!
> 
> Colin
> 
> Quazar : Hardware and Software for the Sam
> http://www.quazar.clara.net/sam/




Re: strange unknown executable

2001-06-24 Thread Colin Piggot
> Did anyone else get this executable with this mail header There's no way
> in hell I'm going to run it!

Yes, i got it too... it got trashed straight away!

Colin

Quazar : Hardware and Software for the Sam
http://www.quazar.clara.net/sam/