RE: New Worm on the loose
looks like NAI is covering this under a beta DAT release, must be something relatively new they are doing. Gregory Sachs Systems Engineer - Windows NT Wheelhouse Corporation Burlington, MA tel: 781-505-3373 fax: 781-505-3001 http://www.wheelhouse.com/ [EMAIL PROTECTED] -Original Message- From: Ben Schorr [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 7:00 PM To: Exchange Discussions Subject: RE: New Worm on the loose O.K., thanks for the confirmation. I'm checking this and the antivirus.com page about the same little bug. Mahalo! -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 12:58 PM To: Exchange Discussions Subject: RE: New Worm on the loose http://vil.nai.com/vil/virusSummary.asp?virus_k=99185 Ken Powell Systems Administrator Clark County Office of Budget and Information Services (OBIS) Vancouver, Washington [EMAIL PROTECTED] Voice: (360) 397-6121 x4658 Fax:(360) 759-6001 -Original Message- From: Ben Schorr [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 3:42 PM To: Exchange 5.5 List Subject: RE: New Worm on the loose Just out of curiousity - how do we know that there is a Melissa-style payload if there is zero information on the web about it and we haven't visited the website yet? For good measure I've gone ahead and tried to configure our filters to detain this little fellow. Still, I'd like to know more about it. Aloha, -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 10:55 AM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Turn off your javascript and you can load the page. It'll download a .JS file and try to screw you around.. My cache is reporting a file is infected with a virus, but it hasn't been run by any programs. No harm done. 8/27/01 4:54 PM Deleted MYPROXYSERVER\PROXYACCOUNT X:\urlcache\dir2\http!``pccontrol.tripod.com`pcControl`interface.js VBS/Generic@MM That's what my log says. Have fun! Bill -Original Message- From: Roger Seielstad [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 4:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Hi! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Wendel, Jesse Sent: Monday, August 27, 2001 2:31 PM To: Exchange Discussions Subject: RE: New Worm on the loose Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
There is a space between Hi and the ! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 2:35 PM To: Exchange Discussions Subject: RE: New Worm on the loose Hi! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Wendel, Jesse Sent: Monday, August 27, 2001 2:31 PM To: Exchange Discussions Subject: RE: New Worm on the loose Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Yeah, I saw that when I went back to the original email. ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 2:39 PM To: Exchange Discussions Subject: RE: New Worm on the loose There is a space between Hi and the ! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 2:35 PM To: Exchange Discussions Subject: RE: New Worm on the loose Hi! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Wendel, Jesse Sent: Monday, August 27, 2001 2:31 PM To: Exchange Discussions Subject: RE: New Worm on the loose Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List
RE: New Worm on the loose
thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 2:38 PM To: Exchange Discussions Subject: RE: New Worm on the loose Yeah, I saw that when I went back to the original email. ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 2:39 PM To: Exchange Discussions Subject: RE: New Worm on the loose There is a space between Hi and the ! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 2:35 PM To: Exchange Discussions Subject: RE: New Worm on the loose Hi! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Wendel, Jesse Sent: Monday, August 27, 2001 2:31 PM To: Exchange Discussions Subject: RE: New Worm on the loose Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives
RE: New Worm on the loose
Gotcha. Thanks. -Original Message- From: Don Ely [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:38 PM To: Exchange Discussions Subject: RE: New Worm on the loose Yeah, I saw that when I went back to the original email. ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 2:39 PM To: Exchange Discussions Subject: RE: New Worm on the loose There is a space between Hi and the ! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 2:35 PM To: Exchange Discussions Subject: RE: New Worm on the loose Hi! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Wendel, Jesse Sent: Monday, August 27, 2001 2:31 PM To: Exchange Discussions Subject: RE: New Worm on the loose Roger - Subject line please!!! Jesse Wendel Sr. Messaging Analyst Puget Sound Energy www.pse.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 2:02 PM To: Exchange Discussions Subject: RE: New Worm on the loose Well, it could help me get that Exch server I have been working for thankyouverymuch. I may just have to take our whole mail system offline until we know for sure :) Then I can go back and say, well if we had Exchange, the worst I would have had to do was take the IMS offline and then que mail at the relay thankyouverymuch -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Ely Sent: Monday, August 27, 2001 1:56 PM To: Exchange Discussions Subject: RE: New Worm on the loose One of your users if I have anything to say about it. Thankyouverymuch ;o) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Martin Blackstone Sent: Monday, August 27, 2001 1:55 PM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com
RE: New Worm on the loose
Check your hard drive for FishTaco.exe -Original Message- From: Daniel Chenault [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 6:28 PM To: Exchange Discussions Subject: Re: New Worm on the loose I visited the site, with OLXP loaded and running. Nothing happened. Nada. Zip. No warnings, no outbound mails, nothing. - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Monday, August 27, 2001 3:46 PM Subject: New Worm on the loose Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
If it is there, eat it -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Andy David Sent: Monday, August 27, 2001 3:36 PM To: Exchange Discussions Subject: RE: New Worm on the loose Check your hard drive for FishTaco.exe -Original Message- From: Daniel Chenault [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 6:28 PM To: Exchange Discussions Subject: Re: New Worm on the loose I visited the site, with OLXP loaded and running. Nothing happened. Nada. Zip. No warnings, no outbound mails, nothing. - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Monday, August 27, 2001 3:46 PM Subject: New Worm on the loose Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
Re: New Worm on the loose
Actually I realized I had configured my browser to not allow Java scripts in the untrusted Internet zone. Silly me for configuring my browser sensibly and with security in mind. - Original Message - From: Andy David [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Monday, August 27, 2001 5:35 PM Subject: RE: New Worm on the loose Check your hard drive for FishTaco.exe -Original Message- From: Daniel Chenault [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 6:28 PM To: Exchange Discussions Subject: Re: New Worm on the loose I visited the site, with OLXP loaded and running. Nothing happened. Nada. Zip. No warnings, no outbound mails, nothing. - Original Message - From: Roger Seielstad [EMAIL PROTECTED] To: Exchange Discussions [EMAIL PROTECTED] Sent: Monday, August 27, 2001 3:46 PM Subject: New Worm on the loose Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Just out of curiousity - how do we know that there is a Melissa-style payload if there is zero information on the web about it and we haven't visited the website yet? For good measure I've gone ahead and tried to configure our filters to detain this little fellow. Still, I'd like to know more about it. Aloha, -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 10:55 AM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
Cause some knuckle head triggered it and it the Sunbelt NT list addy was in his addy book. So we all got to see it first hand. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Ben Schorr Sent: Monday, August 27, 2001 3:42 PM To: Exchange Discussions Subject: RE: New Worm on the loose Just out of curiousity - how do we know that there is a Melissa-style payload if there is zero information on the web about it and we haven't visited the website yet? For good measure I've gone ahead and tried to configure our filters to detain this little fellow. Still, I'd like to know more about it. Aloha, -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 10:55 AM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
http://vil.nai.com/vil/virusSummary.asp?virus_k=99185 Ken Powell Systems Administrator Clark County Office of Budget and Information Services (OBIS) Vancouver, Washington [EMAIL PROTECTED] Voice: (360) 397-6121 x4658 Fax:(360) 759-6001 -Original Message- From: Ben Schorr [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 3:42 PM To: Exchange 5.5 List Subject: RE: New Worm on the loose Just out of curiousity - how do we know that there is a Melissa-style payload if there is zero information on the web about it and we haven't visited the website yet? For good measure I've gone ahead and tried to configure our filters to detain this little fellow. Still, I'd like to know more about it. Aloha, -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 10:55 AM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
RE: New Worm on the loose
O.K., thanks for the confirmation. I'm checking this and the antivirus.com page about the same little bug. Mahalo! -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 12:58 PM To: Exchange Discussions Subject: RE: New Worm on the loose http://vil.nai.com/vil/virusSummary.asp?virus_k=99185 Ken Powell Systems Administrator Clark County Office of Budget and Information Services (OBIS) Vancouver, Washington [EMAIL PROTECTED] Voice: (360) 397-6121 x4658 Fax:(360) 759-6001 -Original Message- From: Ben Schorr [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 3:42 PM To: Exchange 5.5 List Subject: RE: New Worm on the loose Just out of curiousity - how do we know that there is a Melissa-style payload if there is zero information on the web about it and we haven't visited the website yet? For good measure I've gone ahead and tried to configure our filters to detain this little fellow. Still, I'd like to know more about it. Aloha, -Ben- Ben M. Schorr, MVP-Outlook, CNA, MCPx3 Director of Information Services Damon Key Leong Kupchak Hastert http://www.hawaiilawyer.com -Original Message- From: Martin Blackstone [mailto:[EMAIL PROTECTED]] Sent: Monday, August 27, 2001 10:55 AM To: Exchange Discussions Subject: RE: New Worm on the loose So who will be the first to click on the link -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Roger Seielstad Sent: Monday, August 27, 2001 1:46 PM To: Exchange Discussions Subject: New Worm on the loose Importance: High Sorry about the cross posting. We don't have a lot of specifics on it, but there appears to be a new worm on the loose. The payload is a typical Melissa-style worm, where its only action is to send mail to all members of the GAL, with the following message: Hi, how are you ? I am fine here. Please read the page http://pcControl.tripod.com/ to get some knowledge and prevent somebody hack you. Forword this mail to help all your friends too. Its plain text, and carries no executables with it, but I haven't visited the website yet. More info to follow, but there is zero information on the web about it at this point. Roger -- Roger D. Seielstad - MCSE MCT Senior Systems Administrator Peregrine Systems Atlanta, GA http://www.peregrine.com _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED] _ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin:[EMAIL PROTECTED]
