Re: Virus alert, was: Re: SCSI Question

2000-07-09 Thread Paul Herman

On Sun, 9 Jul 2000, Jeroen Ruigrok van der Werven wrote:

 -On [2709 21:20], Leif Neland ([EMAIL PROTECTED]) wrote:
 These messages are infected with the kak virus. See
 http://www.cai.com/virusinfo/encyclopedia/descriptions/wscript.htm
 
 Am I the only one to NOT see this?

Probably not.  It wasn't in the "Content-Type: text/plain" part of the
attachment, just the "text/html" part.

-Paul.



To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Virus alert, was: Re: SCSI Question

2000-07-09 Thread Jeroen Ruigrok van der Werven

-On [2709 22:40], Paul Herman ([EMAIL PROTECTED]) wrote:
On Sun, 9 Jul 2000, Jeroen Ruigrok van der Werven wrote:

 -On [2709 21:20], Leif Neland ([EMAIL PROTECTED]) wrote:
 These messages are infected with the kak virus. See
 http://www.cai.com/virusinfo/encyclopedia/descriptions/wscript.htm
 
 Am I the only one to NOT see this?

Probably not.  It wasn't in the "Content-Type: text/plain" part of the
attachment, just the "text/html" part.

Ah right.  Spotted it.

Which brings us back to a few good rules:

- do NOT post in HTML

- do not configure your mailer to mail lame virus warnings back to lists
  where precedence is set to bulk.

Thanks for reminding me of the text/html.  I looked there before but
failed to spot it.  *sigh*

-- 
Jeroen Ruigrok van der Werven  Network- and systemadministrator
[EMAIL PROTECTED]VIA Net.Works The Netherlands
BSD: Technical excellence at its best  http://www.via-net-works.nl
``...by God I *KNOW* what this network is for, and you can't have it.''
-- Russ Albery


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message



Re: Virus alert, was: Re: SCSI Question

2000-07-09 Thread Ben Smithurst

Jeroen Ruigrok van der Werven wrote:

 -On [2709 21:20], Leif Neland ([EMAIL PROTECTED]) wrote:
 These messages are infected with the kak virus. See
 http://www.cai.com/virusinfo/encyclopedia/descriptions/wscript.htm
 
 Am I the only one to NOT see this?
 
 Both the original postings look normal in mutt whichever way I use to
 look at them.

Try "|less".  I think it says a lot that you have to make special effort
to even _see_ the virus on FreeBSD, when on Windows it probably gets
executed by default...

-- 
Ben Smithurst / [EMAIL PROTECTED] / PGP: 0x99392F7D

 PGP signature


Re: Virus alert, was: Re: SCSI Question

2000-07-09 Thread Marcel Moolenaar

Ben Smithurst wrote:
 
 Jeroen Ruigrok van der Werven wrote:
 
  -On [2709 21:20], Leif Neland ([EMAIL PROTECTED]) wrote:
  These messages are infected with the kak virus. See
  http://www.cai.com/virusinfo/encyclopedia/descriptions/wscript.htm
 
  Am I the only one to NOT see this?
 
  Both the original postings look normal in mutt whichever way I use to
  look at them.
 
 Try "|less".  I think it says a lot that you have to make special effort
 to even _see_ the virus on FreeBSD, when on Windows it probably gets
 executed by default...

Netscape runs it as well. Seeing Netscape start java is a clear sign.
It's probably harmless in this case, but I didn't wait to find that out.

-- 
Marcel Moolenaar
  mail: [EMAIL PROTECTED] / [EMAIL PROTECTED]
  tel:  (408) 447-4222


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message