Re: Email account utilization warning.
On 02 Mar 2004 22:53:49 -0500 Mike Jeays [EMAIL PROTECTED] probably wrote: PIF files are Windows Program Information Files, dating from the days of Windows 3.1. I am surprised they still work - but it seems that they do. They have executable content, and are now being used to spread malicious software. Just for the sake of correctness... Physically, real PIFs have no more executable content than something between a binary data file and a soft link. But Windows thinks that they can be `executed' (that was necessary to make them usable as links, I guess), which is quite enough - when the loader analyzes the file, it understands it's not a PIF but an EXE format executable from the magic number and runs it. Some olden virus-writers probably think that if one masquerades an .exe as .pif, some olden antiviruses won't find them :). They are making progress: the virus is about 25% smaller than its .C predecessor: P.S. And nobody even cared to remove staff@ from CC:) -- DoubleF Cloning is the sincerest form of flattery. pgp0.pgp Description: PGP signature
Email account utilization warning.
Dear user, the management of Freebsd.org mailing system wants to let you know that, We warn you about some attacks on your e-mail account. Your computer may contain viruses, in order to keep your computer and e-mail account safe, please, follow the instructions. For further details see the attach. The Management, The Freebsd.org team http://www.freebsd.org attachment: Message.pif ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Email account utilization warning.
Dear user of FreeBSD.org mailing system, Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service. For more information see the attached file. Kind regards, The FreeBSD.org teamhttp://www.freeBSD.org attachment: MoreInfo.pif ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Email account utilization warning.
[EMAIL PROTECTED] wrote: Dear user of FreeBSD.org mailing system, Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service. For more information see the attached file. attachment is .pif file thinks it's DOS exe. man -k can't find it. what is it? gracias.. a newbie ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
RE: Email account utilization warning.
Are you goofy, sending an virus alert and then say open an attachment. That's where virus live and get installed from. If you can not put your complete message in the text of the email body then this is not for real and gets deleted along with all the other spam and junk mail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 9:01 PM To: [EMAIL PROTECTED] Subject: Email account utilization warning. Dear user, the management of Freebsd.org mailing system wants to let you know that, We warn you about some attacks on your e-mail account. Your computer may contain viruses, in order to keep your computer and e-mail account safe, please, follow the instructions. For further details see the attach. The Management, The Freebsd.org team http://www.freebsd.org ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Email account utilization warning. - yes, it's garbage.
Heh. are you goofy? :) j/k. Note that the original sender address on these was spoofed (see also: faked) In actuallity, it is Netsky-D (probably, I'm not opening it). Courtesy of Yahoo! : http://story.news.yahoo.com/news?tmpl=storycid=581e=3u=/nm/20040301/tc_nm/tech_worm_dc So, newbies out there still checking mail on MS systems, don't open .PIF's from this list or anywhere else, they are bad. ~j fbsd_user wrote: Are you goofy, sending an virus alert and then say open an attachment. That's where virus live and get installed from. If you can not put your complete message in the text of the email body then this is not for real and gets deleted along with all the other spam and junk mail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 9:01 PM To: [EMAIL PROTECTED] Subject: Email account utilization warning. Dear user, the management of Freebsd.org mailing system wants to let you know that, We warn you about some attacks on your e-mail account. Your computer may contain viruses, in order to keep your computer and e-mail account safe, please, follow the instructions. For further details see the attach. The Management, The Freebsd.org team http://www.freebsd.org ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] -- Jonathan T. Sage Theatrical Lighting / Set Designer Professional Web Design [HTTP://www.JTSage.com] [EMAIL PROTECTED] [See Headers for Contact Info] signature.asc Description: OpenPGP digital signature
Re: Email account utilization warning. - yes, it's garbage.
doh! Jonathan T. Sage wrote: Heh. are you goofy? :) j/k. apparently. Note that the original sender address on these was spoofed (see also: faked) In actuallity, it is Netsky-D (probably, I'm not opening it). Courtesy of Yahoo! : http://story.news.yahoo.com/news?tmpl=storycid=581e=3u=/nm/20040301/tc_nm/tech_worm_dc So, newbies out there still checking mail on MS systems, don't open .PIF's from this list or anywhere else, they are bad. ~j fbsd_user wrote: Are you goofy, sending an virus alert and then say open an attachment. That's where virus live and get installed from. If you can not put your complete message in the text of the email body then this is not for real and gets deleted along with all the other spam and junk mail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 9:01 PM To: [EMAIL PROTECTED] Subject: Email account utilization warning. Dear user, the management of Freebsd.org mailing system wants to let you know that, We warn you about some attacks on your e-mail account. Your computer may contain viruses, in order to keep your computer and e-mail account safe, please, follow the instructions. For further details see the attach. The Management, The Freebsd.org team http://www.freebsd.org ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Email account utilization warning.
On Tue, 2004-03-02 at 22:00, lee slaughter wrote: [EMAIL PROTECTED] wrote: Dear user of FreeBSD.org mailing system, Our main mailing server will be temporary unavaible for next two days, to continue receiving mail in these days you have to configure our free auto-forwarding service. For more information see the attached file. attachment is .pif file thinks it's DOS exe. man -k can't find it. what is it? gracias.. a newbie ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED] PIF files are Windows Program Information Files, dating from the days of Windows 3.1. I am surprised they still work - but it seems that they do. They have executable content, and are now being used to spread malicious software. They are perfectly harmless on a FreeBSD or Linux machine - but be very careful not to run them on a Windows machine. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Email account utilization warning.
On Tuesday 02 March 2004 10:01 pm, fbsd_user fbsd_user [EMAIL PROTECTED] wrote: Are you goofy, sending an virus alert and then say open an attachment. That's where virus live and get installed from. If you can not put your complete message in the text of the email body then this is not for real and gets deleted along with all the other spam and junk mail. The message is from the virus, not from a human. It's the Bagle.J virus, appeared this afternoon (right after Bagle.I, of course). It's more convincing than most, so I expect to see some infected systems at work tomorrow despite the fact that I sent a warning to all of our users when the first copy arrived. Argh. See http://us.mcafee.com/virusInfo/default.asp?id=descriptionvirus_k=101071 - Bob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 9:01 PM To: [EMAIL PROTECTED] Subject: Email account utilization warning. Dear user, the management of Freebsd.org mailing system wants to let you know that, [blah blah blah...] ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Email account utilization warning. - yes, it's garbage.
- Original Message - From: Jonathan T. Sage [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 9:07 PM Subject: Re: Email account utilization warning. - yes, it's garbage. Heh. are you goofy? :) j/k. Note that the original sender address on these was spoofed (see also: faked) In actuallity, it is Netsky-D (probably, I'm not opening it). Courtesy of Yahoo! : http://story.news.yahoo.com/news?tmpl=storycid=581e=3u=/nm/20040301/tc_nm/tech_worm_dc So, newbies out there still checking mail on MS systems, don't open .PIF's from this list or anywhere else, they are bad. ~j - It's being tagged as Worm.Bagle.J by clamscan.. Just as bad in my opinion. There's nothing wrong with reading list mail from windows, as long as you know how to protect yourself from the bad guys. Besides, all of the lists that I subscribe to, go to my work account where all the bad extensions are filtered with procmail and clamscan / vscan and amavis :) I can't speak for anyone else, but I'm not stupid. I may look the part but that don't mean I is. :) -- Micheal Patterson Network Administration TSG Incorporated 405-917-0600 ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
