Re: [newbie] win32 badtrans worm.

2001-11-28 Thread Ed Tharp

That was just the name that was attached to that one mail in question. as I 
understand it, it can take a number of names from the hard drive of the 
person who sent it to you really why , if you have a box that can run 
Mdk, and you do have MDK, would you run the risk? it seems to me so much 
more ...shall we say "intelligent" to use the OS that is NOT vulnerable. 
don't take it as a flame, or as directed to you personallly (unless the shoe 
fits) when some of the folks who know better, get frustrated at those who 
refuse to know better, especially since it costs everyone for the crap MS 
push down the consumers throat. if you don't think the chewing up of 
bandwidth by M$ propagated worms costs folks that don't use M$ products, ask 
your ISP for a rebate, since you don't spread worms as a linux user. (who 
NEVER signs in as root, when a network interface is up) or ask a PSInet stock 
holder. 


On Wednesday 28 November 2001 13:22, you wrote:


> Ed Tharp wrote:
> > if you read in linux, then the viri ain't your problem, if you are a M$
> > user, look for a file called setup.pif.
>
> thank you, ed.
>
> i use both linux and ms, but do email in ms. i like early version, 4.07,
> of netscape, and it is not available for linux.
>
> would you know what date message was sent and 'subject:'?
>
> reason i ask, i would like to check back and see what happened and why i
> did not see it come into this system.
>
> i have ms os locked down and should have seen it come thru. i need to
> check back thru ms and linux logs to insure that i did not release it.
>
> neither i, nor any of my clients have had a problem, but i do want to
> know for sure.
>
> sending list a flame about a virus/worm without full info is almost as
> bad as sending virus.
>
>
> tc,hago.
>
> g
> .
>
> =+=
>  think green...
>   save a tree, save a life, save time, save bandwidth, save storage.
>send text email..   text/plain - disable pgp/gpg/geek code
> =+=
>  if you are proud to be an american, then buy "made in america".
> =+=



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread g

Manuel Drake wrote:

> I thought I was talking of both.

was not sure. why i asked.

> Hrmm, unsure, yes, nothing before 4.08 is findable for me.

> Ah, messenger... no, never, bit of a security hole letting your browser
> know your email address.

interesting. would you please elabarate?

i have a lot of nc email that i will need to maintain, and i plan to end
up using mutt.

> good question, I'll have to look around, but would start with download.com

i will go back thru my old distrib cds, rh4.0 and up, to see what is on them.
several had netscape on them, but i do not recall what version.

> hope so, good luck.

thank you. and thank you again for your responce.


tc,hago.

g
.

=+=
 think green...
  save a tree, save a life, save time, save bandwidth, save storage.
   send text email..   text/plain - disable pgp/gpg/geek code
=+=
 if you are proud to be an american, then buy "made in america".
=+=





Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread Manuel Drake

On Wed, 28 Nov 2001, g wrote:

> Manuel Drake wrote:
>
> > I think it's the 4.08 netscape navigator that you use, and yes, it's
> > available for linux too, as I use it now.
>
> actually, i am using 4.06. or are you refering to what is avaiable
> for linux?

I thought I was talking of both.

> not sure about version diffs between linux and ms, but there was a
> drastic change from 4.06 to 4.08.

Hrmm, unsure, yes, nothing before 4.08 is findable for me.


> 4.06 messenger is in seperate windows, where 4.08 is all in one.
> which i do not care for and why i held with 4.06.

Ah, messenger... no, never, bit of a security hole letting your browser
know your email address.  I use the standalone navigator ONLY.

> i would like to look at 4.08 linux. where did you find it?

good question, I'll have to look around, but would start with download.com

> > just an FYI
>
> and just maybe what i am looking for. thanks.

hope so, good luck.




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread g

Manuel Drake wrote:

> I think it's the 4.08 netscape navigator that you use, and yes, it's
> available for linux too, as I use it now.

actually, i am using 4.06. or are you refering to what is avaiable
for linux?

not sure about version diffs between linux and ms, but there was a
drastic change from 4.06 to 4.08.

4.06 messenger is in seperate windows, where 4.08 is all in one.
which i do not care for and why i held with 4.06.

i would like to look at 4.08 linux. where did you find it?

> just an FYI

and just maybe what i am looking for. thanks.



tc,hago.

g
.

=+=
 think green...
  save a tree, save a life, save time, save bandwidth, save storage.
   send text email..   text/plain - disable pgp/gpg/geek code
=+=
 if you are proud to be an american, then buy "made in america".
=+=





Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread Manuel Drake

On Wed, 28 Nov 2001, g wrote:

> Ed Tharp wrote:
> >
> > if you read in linux, then the viri ain't your problem, if you are a M$ user,
> > look for a file called setup.pif.
>
> thank you, ed.
>
> i use both linux and ms, but do email in ms. i like early version, 4.07,
> of netscape, and it is not available for linux.

I think it's the 4.08 netscape navigator that you use, and yes, it's
available for linux too, as I use it now.

just an FYI






Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread g

Ed Tharp wrote:
>
> if you read in linux, then the viri ain't your problem, if you are a M$ user,
> look for a file called setup.pif.

thank you, ed.

i use both linux and ms, but do email in ms. i like early version, 4.07,
of netscape, and it is not available for linux.

would you know what date message was sent and 'subject:'?

reason i ask, i would like to check back and see what happened and why i
did not see it come into this system.

i have ms os locked down and should have seen it come thru. i need to
check back thru ms and linux logs to insure that i did not release it.

neither i, nor any of my clients have had a problem, but i do want to
know for sure.

sending list a flame about a virus/worm without full info is almost as
bad as sending virus.


tc,hago.

g
.

=+=
 think green...
  save a tree, save a life, save time, save bandwidth, save storage.
   send text email..   text/plain - disable pgp/gpg/geek code
=+=
 if you are proud to be an american, then buy "made in america".
=+=





Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-28 Thread Ed Tharp

if you read in linux, then the viri ain't your problem, if you are a M$ user, 
look for a file called setup.pif. 


On Tuesday 27 November 2001 23:28, you wrote:


> Franki wrote:
> > Hi all,
> >
> > Frank McKenna just sent the list the above virus/worm.. the email will
> > try to automatically save the file and opens it in media player..
>
> ok. so frank mckenna sent list a virus/worm.
>
> well, not really... virus/worm sent itself.
>
> frank did not send virus/worm intentionally, with malaise or malice.
>
> shit happens when you eat regularly. virus/worm happen when you use ms.
>
> when did this virus get sent? what was 'subject:'?
>
> if you are going to inform, please inform. tho from 'hate mail' sent to
> list, you should have informed frank off list.
>
> i have check thru all messages from this list for all messages sent by
> frank, and i have yet to find any indication of a virus. only attachments
> were mandrake's attached pack/service spam.
>
> even check norton antivirus for any quarantines and there were none.
>
> if this virus/worm got thru to my systems, i would like to clean it out.
> as i am sure anyone else using ms would like to do.
>
> one thing that i did note for sure. those who replied blasting frank and
> microsoft, do not seem to know how to cut out unneeded quotes. but that
> seems to be norm for this list.
>
> no, i do not like ms bs. have not liked it from first dos version he
> stoled from digital research. but, like others, i have to use it because
> of clients that have to use it.
>
> this is not a perfect world, nor is usa a perfect country. if it was,
> bg would still be in jail and we would all still be enjoying unix,
> cp/m, cdos, and drdos.
>
> frank, glad you were able to get your system cleaned up frank. i lost 2.5
> months of work thanks to a trojan sent by ole.
>
> as a suggestion, for those having to use ms, drop ie and ole. use netscape
> or some other good msos browser and mail handler. install norton antivirus,
> or what ever, and keep it updated.
>
>
>
> tc,hago.
>
> g
> .
>
> =+=
>  think green...
>   save a tree, save a life, save time, save bandwidth, save storage.
>send text email..   text/plain - disable pgp/gpg/geek code
> =+=
>  if you are proud to be an american, then buy "made in america".
> =+=



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-27 Thread g


Franki wrote:
>
> Hi all,
> 
> Frank McKenna just sent the list the above virus/worm.. the email will
> try to automatically save the file and opens it in media player..

ok. so frank mckenna sent list a virus/worm.

well, not really... virus/worm sent itself.

frank did not send virus/worm intentionally, with malaise or malice.

shit happens when you eat regularly. virus/worm happen when you use ms.

when did this virus get sent? what was 'subject:'?

if you are going to inform, please inform. tho from 'hate mail' sent to
list, you should have informed frank off list.

i have check thru all messages from this list for all messages sent by
frank, and i have yet to find any indication of a virus. only attachments
were mandrake's attached pack/service spam.

even check norton antivirus for any quarantines and there were none.

if this virus/worm got thru to my systems, i would like to clean it out.
as i am sure anyone else using ms would like to do.

one thing that i did note for sure. those who replied blasting frank and
microsoft, do not seem to know how to cut out unneeded quotes. but that
seems to be norm for this list.

no, i do not like ms bs. have not liked it from first dos version he
stoled from digital research. but, like others, i have to use it because
of clients that have to use it.

this is not a perfect world, nor is usa a perfect country. if it was,
bg would still be in jail and we would all still be enjoying unix,
cp/m, cdos, and drdos.

frank, glad you were able to get your system cleaned up frank. i lost 2.5
months of work thanks to a trojan sent by ole.

as a suggestion, for those having to use ms, drop ie and ole. use netscape
or some other good msos browser and mail handler. install norton antivirus,
or what ever, and keep it updated.



tc,hago.

g
.

=+=
 think green...
  save a tree, save a life, save time, save bandwidth, save storage.
   send text email..   text/plain - disable pgp/gpg/geek code
=+=
 if you are proud to be an american, then buy "made in america".
=+=





Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



RE: [newbie] win32 badtrans worm.

2001-11-27 Thread Franki

keh???

nope, I am not a network admin at a uni, I am a net admin for an online
payment gateway,,
among other things... so when I am at home, (and I do all my talking to this
list from home..
I don't really have more resouces then the average schmoo  :-)

I got hacked once long ago, (redhat 6.2 wu-ftp) and it made me ultra
paranoid,

and since then I have not had any box under my protection hacked (that I
have been able to verify anyway),
caught a virus, or anything else detrimental, since I get about 1000 emails
a day, I get alot of virus's,
so I had to learn quick how to deal with it.. especially since I have alot
of windows users on our network
that I can't do anything about, I just protect them as I can. (and before
you say anything Tom, they all run
apps that can't be swapped over to linux... otherwise I would have already.)


rgds

Frank





-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Frank McKenna
Sent: Wednesday, 28 November 2001 3:18 AM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] win32 badtrans worm.


Hi All,

I am virus free but it took awhile.   My apologies to all.  It appears that
I caught the virus from a Samba list.

Just my two cents about comments from this list

> > you might want to check your system Frank...
> > Franki

Franki, you've been a big help and I have apreciated your advice but, if I
remember correctly, you are Network Admin at a Uni so you definitely have
more recourses at your disposal than the humble newbie such as myself.

Tom, you have been a good resource to people as well and I have read with
great interest some of the helpful replies that you have posted.

Maybe you'd like to come up here and get one of the five modems that I have
(three of which are definitely supposed to work on Linux) WORKING.  I have
followed directions, installed drivers, etc.   I have had all modems
detected in the BIOS but no of them worked and one even caused my system to
crash to the point that it was unrecoverable

I can't ignore your arrogance and pomposity with comments such as this " to
(ignorant, computer illiterate) Winblows users lists and
> newsgroups. You'll be very busy on a daily basis  ... mostly" taken from
your rant below.  Where do you get off saying crap like this.  We all have
to start somewhere and connecting to this list by any means possible is a
godsend to newbies

Just my two cents

- Original Message -
From: "Tom Brinkman" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 26, 2001 11:19 AM
Subject: Re: [newbie] win32 badtrans worm.


> On Monday 26 November 2001 12:13 pm, Franki wrote:
>
> > you might want to check your system Frank...
> > Franki
>
>You need to check your system Franki since you sent with:
>
> X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
> X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
> Importance: Normal
>
>WHICH is a guaranteed virus transmission propagater to other
> Windoze users, and pretty much fsck'ups the Net in general, even
> fellow Linux users who have to put up with the damage y'all
> propulgate to Net servers, and the stolen banwidth y'all suck up.
>
>I dunno how to convince y'all   NEVER connect to the Net with, any
> M$ product. There is no way to secure or defend an M$ system.
> (period).  You can only buy/beg/borrow a bunch of ineffective
> firewalls and virus scanners for M$ crap. Then, the only thing you've
> accomplished is to fool yourself.
>
>If you dual boot, delete anything Winblows has to do with
> connecting to the Net, unplug the phone line.  Then you've got some
> security, at least till you buy a CD or floppy with a winblows virus
> on it.  Buy a real modem and use a real OS to connect.
>
>   It amazes me that some people who do run Linux (part time), believe
> that connecting with Windoze is a good, or even tolerable idea.
> Specially on this (Linux) list. Winsux virus warnings to this list
> are OFF TOPIC, immaterial, and border on ridiculous. Post these
> warnings to (ignorant, computer illiterate) Winblows users lists and
> newsgroups. You'll be very busy on a daily basis  ... mostly you'll
> be weeks, even months and years behind
>
>  Jeez, in a perfect world, Winblows users wouldn't be allowed to
> connect.
>
>   ... there ought'a be a law
>
> --
> Tom Brinkman   Galveston Bay, USA
>
>
>
 Frank McKenna







> Want to buy your Pack or Services from MandrakeSoft?
> Go to http://www.mandrakestore.com
>






Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



RE: [newbie] win32 badtrans worm.

2001-11-27 Thread Franki

ok, we know that most win firewall apps can't stop windows from sucking..
they have md5 hashkeys for all major apps to stop them being replaced by
trojans,

but windows can be tricked into allowing a trojan to talk though IE...

big deal,, I have two antivirus apps on the PC, it'd have to be a damn new
trojan to actually be savable to the hard disk.
(which incidently is the recommended defence (antivir) that that article
suggested.)

one little point,, I wasn't aware that tiny firewall (linux) or
InteractiveBastille did md5 hashkeys of executables at all...

I actually think it would be fantastic if it did,, then we wouldn't have to
worry so much about root kits...

much of a muchance I think,, if you do the work, you can secure any OS to
about 98 or so %... M$ just requires much more work..

and I keep saying this  ITS BEHIND A LINUX FIREWALL, WITH SNORT and
PORTSENTRY  what more could I possibly do to secure this thing... grc
(and my own port scanner tell me absolutly everything is blocked (and I
scanned 64000 ports.).. thats about as good as I need to be.)


rgds

Frank




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tom Brinkman
Sent: Tuesday, 27 November 2001 8:41 PM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] win32 badtrans worm.


On Tuesday 27 November 2001 04:23 am, Franki wrote:
> RE: [newbie] win32 badtrans worm.yeah, I agree,,,
>
> I hate microsoft as much as the next guy, probably more,  but I
> have to write perl scripts that work and are tested in windows and
> linux, so I have to have a windows box..
> I also have a winmodem in my notebook that I need when out of town.
>
> so I loaded win2000 pro, then loaded all patches an service packs,
> then turned off all the dangerous stuff in outlook and IE...
> then loaded pccillin and innoculate PE  (which is a free antivirus
> for windows), then I downloaded the FREE Tiny firewall package,
> which is regarded as being the
> best firewall package for windows workstations..

  http://www.zdnet.com/zdnn/stories/news/0,4586,5099447,00.html

   Franki, there's almost as many articles of this nature on the Net
as there are constant reports of new security flaws in Windoze
products.

--
  Tom Brinkman             Galveston Bay, USA

>
> AND,
>
> This thing sits behind a linux masq box with a very tight firewall
> (BASICALLY NO SERVICES OPEN. AND NO ICMP) and it also retrieves its
> mail from another linux box running postfix that scans all incoming
> and outgoing mail for
> virus's, and doesn't let them though... (using amavis and the free
> Trend filescan.)
>
>
> So I don't know, I am fairly confident that I am not presently
> hackable...
>
> GRC reports me as being entirely invisable... so its at least
> fairly hard to do. which is more then anyone can ask nowdays.
>
> When I have no reason to use winblows, then I won't,,, but right
> now thats not an option..
>
> even if windows does suck, and we all know it does,, I have secured
> it as much as possible and IT IS sitting behind a linux firewall
> and MASQ ,,,
>
> I think it is pretty safe.. and I don't think I am fooling myself.
>
> Tell me how my security is Lax ???
>
>
> rgds
>
> Frank
>   -Original Message-
>   From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Harrison, Neil
>   Sent: Tuesday, 27 November 2001 8:39 AM
>   To: '[EMAIL PROTECTED]'
>   Subject: RE: [newbie] win32 badtrans worm.
>
>
>   You are a very angry, bitter man.
>
>   See "y'all" later
>
>   -Original Message-
>   From: Tom Brinkman [mailto:[EMAIL PROTECTED]]
>   Sent: Monday, November 26, 2001 10:19 AM
>   To: [EMAIL PROTECTED]
>   Subject: Re: [newbie] win32 badtrans worm.
>
>   On Monday 26 November 2001 12:13 pm, Franki wrote:
>   > you might want to check your system Frank...
>   > Franki
>
>  You need to check your system Franki since you sent with:
>
>   X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
>   X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
>   Importance: Normal
>
>  WHICH is a guaranteed virus transmission propagater to other
>   Windoze users, and pretty much fsck'ups the Net in general, even
>   fellow Linux users who have to put up with the damage y'all
>   propulgate to Net servers, and the stolen banwidth y'all suck up.
>
>  I dunno how to convince y'all   NEVER connect to the Net with,
> any M$ product. There is no way to secure or defend an M$ system.
> (period).  You can only buy/beg/borrow a bunch of ineffective
> firewalls and virus scanners for M$ crap. Then, the only thing
> you've accomplished is to fool yourself.
>

Re: [newbie] win32 badtrans worm.

2001-11-27 Thread Tom Brinkman

On Tuesday 27 November 2001 04:23 am, Franki wrote:
> RE: [newbie] win32 badtrans worm.yeah, I agree,,,
>
> I hate microsoft as much as the next guy, probably more,  but I
> have to write perl scripts that work and are tested in windows and
> linux, so I have to have a windows box..
> I also have a winmodem in my notebook that I need when out of town.
>
> so I loaded win2000 pro, then loaded all patches an service packs,
> then turned off all the dangerous stuff in outlook and IE...
> then loaded pccillin and innoculate PE  (which is a free antivirus
> for windows), then I downloaded the FREE Tiny firewall package,
> which is regarded as being the
> best firewall package for windows workstations..

  http://www.zdnet.com/zdnn/stories/news/0,4586,5099447,00.html

   Franki, there's almost as many articles of this nature on the Net 
as there are constant reports of new security flaws in Windoze 
products.

-- 
  Tom Brinkman             Galveston Bay, USA

>
> AND,
>
> This thing sits behind a linux masq box with a very tight firewall
> (BASICALLY NO SERVICES OPEN. AND NO ICMP) and it also retrieves its
> mail from another linux box running postfix that scans all incoming
> and outgoing mail for
> virus's, and doesn't let them though... (using amavis and the free
> Trend filescan.)
>
>
> So I don't know, I am fairly confident that I am not presently
> hackable...
>
> GRC reports me as being entirely invisable... so its at least
> fairly hard to do. which is more then anyone can ask nowdays.
>
> When I have no reason to use winblows, then I won't,,, but right
> now thats not an option..
>
> even if windows does suck, and we all know it does,, I have secured
> it as much as possible and IT IS sitting behind a linux firewall
> and MASQ ,,,
>
> I think it is pretty safe.. and I don't think I am fooling myself.
>
> Tell me how my security is Lax ???
>
>
> rgds
>
> Frank
>   -Original Message-
>   From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Harrison, Neil
>   Sent: Tuesday, 27 November 2001 8:39 AM
>   To: '[EMAIL PROTECTED]'
>   Subject: RE: [newbie] win32 badtrans worm.
>
>
>   You are a very angry, bitter man.
>
>   See "y'all" later
>
>   -Original Message-
>   From: Tom Brinkman [mailto:[EMAIL PROTECTED]]
>   Sent: Monday, November 26, 2001 10:19 AM
>   To: [EMAIL PROTECTED]
>   Subject: Re: [newbie] win32 badtrans worm.
>
>   On Monday 26 November 2001 12:13 pm, Franki wrote:
>   > you might want to check your system Frank...
>   > Franki
>
>  You need to check your system Franki since you sent with:
>
>   X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
>   X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
>   Importance: Normal
>
>  WHICH is a guaranteed virus transmission propagater to other
>   Windoze users, and pretty much fsck'ups the Net in general, even
>   fellow Linux users who have to put up with the damage y'all
>   propulgate to Net servers, and the stolen banwidth y'all suck up.
>
>  I dunno how to convince y'all   NEVER connect to the Net with,
> any M$ product. There is no way to secure or defend an M$ system.
> (period).  You can only buy/beg/borrow a bunch of ineffective
> firewalls and virus scanners for M$ crap. Then, the only thing
> you've accomplished is to fool yourself.
>
>  If you dual boot, delete anything Winblows has to do with
>   connecting to the Net, unplug the phone line.  Then you've got
> some security, at least till you buy a CD or floppy with a winblows
> virus on it.  Buy a real modem and use a real OS to connect.
>
> It amazes me that some people who do run Linux (part time),
> believe that connecting with Windoze is a good, or even tolerable
> idea. Specially on this (Linux) list. Winsux virus warnings to this
> list are OFF TOPIC, immaterial, and border on ridiculous. Post
> these warnings to (ignorant, computer illiterate) Winblows users
> lists and newsgroups. You'll be very busy on a daily basis  ...
> mostly you'll be weeks, even months and years behind
>
>Jeez, in a perfect world, Winblows users wouldn't be allowed to
>   connect.
>
> ... there ought'a be a law
>
>   --
> Tom Brinkman Galveston Bay, USA



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



RE: [newbie] win32 badtrans worm.

2001-11-27 Thread Franki
Title: RE: [newbie] win32 badtrans worm.



yeah, I 
agree,,,
 
I hate microsoft as much as the 
next guy, probably more,  but I have to write perl scripts that work and 
are tested in windows and linux, so I have to have a windows box.. 

I also have a winmodem in my 
notebook that I need when out of town.
 
so I loaded win2000 pro, then 
loaded all patches an service packs, then turned off all the dangerous stuff in 
outlook and IE...
then loaded pccillin and 
innoculate PE  (which is a free antivirus for windows), then I downloaded 
the FREE Tiny firewall package, which is regarded as being the 

best firewall package for 
windows workstations..
 
AND, 
 
This thing sits behind a linux 
masq box with a very tight firewall  (BASICALLY NO SERVICES OPEN. AND NO 
ICMP) and it also retrieves its mail from another linux box running postfix that 
scans all incoming and outgoing mail for
virus's, and doesn't let them 
though... (using amavis and the free Trend filescan.)
 
 
So I don't know, I am fairly 
confident that I am not presently hackable...
 
GRC reports me as being 
entirely invisable... so its at least fairly hard to do. which is more then 
anyone can ask nowdays.
 
When I have no reason to use 
winblows, then I won't,,, but right now thats not an 
option..
 
even if windows does suck, and 
we all know it does,, I have secured it as much as possible and IT IS sitting 
behind a linux firewall and MASQ ,,, 
 
I think it is pretty safe.. and 
I don't think I am fooling myself.
 
Tell me how my security is Lax 
??? 
 
 
rgds
 
Frank

  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On 
  Behalf Of Harrison, NeilSent: Tuesday, 27 November 2001 8:39 
  AMTo: '[EMAIL PROTECTED]'Subject: RE: [newbie] 
  win32 badtrans worm.
  You are a very angry, bitter man. 
  See "y'all" later 
  -Original Message- From: Tom 
  Brinkman [mailto:[EMAIL PROTECTED]] 
  Sent: Monday, November 26, 2001 10:19 AM 
  To: [EMAIL PROTECTED] Subject: Re: [newbie] win32 badtrans worm. 
  On Monday 26 November 2001 12:13 pm, Franki wrote: 
  > you might want to check your system Frank... 
  > Franki 
     You need to check your system Franki since you 
  sent with: 
  X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 
  (9.0.2911.0) X-Mimeole: Produced By Microsoft MimeOLE 
  V5.50.4807.1700 Importance: Normal 
     WHICH is a guaranteed virus transmission 
  propagater to other Windoze users, and pretty much 
  fsck'ups the Net in general, even fellow Linux users 
  who have to put up with the damage y'all propulgate to 
  Net servers, and the stolen banwidth y'all suck up. 
     I dunno how to convince y'all   NEVER 
  connect to the Net with, any M$ product. There is no 
  way to secure or defend an M$ system. (period).  
  You can only buy/beg/borrow a bunch of ineffective firewalls and virus scanners for M$ crap. Then, the only thing you've 
  accomplished is to fool yourself. 
     If you dual boot, delete anything Winblows has to 
  do with connecting to the Net, unplug the phone 
  line.  Then you've got some security, at least 
  till you buy a CD or floppy with a winblows virus on 
  it.  Buy a real modem and use a real OS to connect. 
    It amazes me that some people who do run Linux (part 
  time), believe that connecting with Windoze is a good, 
  or even tolerable idea. Specially on this (Linux) 
  list. Winsux virus warnings to this list are OFF 
  TOPIC, immaterial, and border on ridiculous. Post these warnings to (ignorant, computer illiterate) Winblows users lists and 
  newsgroups. You'll be very busy on a daily basis  
  ... mostly you'll be weeks, even months and years 
  behind 
   Jeez, in a perfect world, Winblows users wouldn't be 
  allowed to connect. 
    ... there ought'a be a law 
  --   Tom Brinkman      
         Galveston Bay, USA 
  


Re: [newbie] win32 badtrans worm.

2001-11-26 Thread Anuerin G.Diaz


NOTE: may be offtopic

mwehehehehehehe. sorry but i cant help but laugh with the description of tom. does the 
shoe fit? ;-)

ciao!

On Mon, 26 Nov 2001 16:38:32 -0800, "Harrison, Neil" <[EMAIL PROTECTED]> wrote:

   You are a very angry, bitter man. 
   
   See "y'all" later 
   
   -Original Message- 
   From: Tom Brinkman [ mailto:[EMAIL PROTECTED]
   <mailto:[EMAIL PROTECTED]> ] 
   Sent: Monday, November 26, 2001 10:19 AM 
   To: [EMAIL PROTECTED] 
   Subject: Re: [newbie] win32 badtrans worm. 
   
   


-- 

"Programming, an artform that fights back."

===

Anuerin G. Diaz
Design Engineer
25/F Equitable-PCI Tower
ADB Ave. cor. Poveda St.,
Ortigas Center, Pasig City,
Philippines 1605

Tel no: (632) 6383070 loc 75
===



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



RE: [newbie] win32 badtrans worm.

2001-11-26 Thread Harrison, Neil
Title: RE: [newbie] win32 badtrans worm.





You are a very angry, bitter man.


See "y'all" later


-Original Message-
From: Tom Brinkman [mailto:[EMAIL PROTECTED]] 
Sent: Monday, November 26, 2001 10:19 AM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] win32 badtrans worm.



On Monday 26 November 2001 12:13 pm, Franki wrote:


> you might want to check your system Frank...
> Franki


   You need to check your system Franki since you sent with:


X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal


   WHICH is a guaranteed virus transmission propagater to other 
Windoze users, and pretty much fsck'ups the Net in general, even 
fellow Linux users who have to put up with the damage y'all 
propulgate to Net servers, and the stolen banwidth y'all suck up.


   I dunno how to convince y'all   NEVER connect to the Net with, any 
M$ product. There is no way to secure or defend an M$ system. 
(period).  You can only buy/beg/borrow a bunch of ineffective 
firewalls and virus scanners for M$ crap. Then, the only thing you've 
accomplished is to fool yourself.


   If you dual boot, delete anything Winblows has to do with 
connecting to the Net, unplug the phone line.  Then you've got some 
security, at least till you buy a CD or floppy with a winblows virus 
on it.  Buy a real modem and use a real OS to connect.


  It amazes me that some people who do run Linux (part time), believe 
that connecting with Windoze is a good, or even tolerable idea. 
Specially on this (Linux) list. Winsux virus warnings to this list 
are OFF TOPIC, immaterial, and border on ridiculous. Post these 
warnings to (ignorant, computer illiterate) Winblows users lists and 
newsgroups. You'll be very busy on a daily basis  ... mostly you'll 
be weeks, even months and years behind


 Jeez, in a perfect world, Winblows users wouldn't be allowed to 
connect. 


  ... there ought'a be a law


-- 
  Tom Brinkman             Galveston Bay, USA







RE: [newbie] win32 badtrans worm.

2001-11-26 Thread Lee Roberts

I'm assuming that this virus only affects Windows? My Norton AV just
stopped this virus but couldn't clean it even though my AV data files are
up to date. So, I had to quarantine the virus and then used the quarantine
console to destroy it. 

At 04:56 AM 11/27/2001 +0800, Franki wrote:
>yes, normally I agree with you,
>
>but I have tightened it up abit,
>
>many things in IE are turned off, outlook uses txt only, there is a firewall
>on this box, and it also sits behind my linux firewall..
>
>and its win2000SP2, which in and of itself does not mean much, but its far
>more secure then win98, which again, isn't saying much.. but the fact is
>that I have never been infected on this box for anything, due to my
>paranoia...
>(Tiny firewall, PC-cillan and Innoculate all running at all times, and like
>I said, it sits behind a linux box and it gets its mail from a linux server
>that uses amavis and postfix to check all incoming and outgoing mail for
>Virus's...
>
>I only got franks email because the pattern file on the mail server was two
>days old, and apparently the virus is newer..
>I just updated it and sent the virus though, and its all working fine.
>
>
>Thanks for the  concern though... :-)
>
>
>rgds
>
>
>Frank
>
>
>
>-Original Message-
>From: [EMAIL PROTECTED]
>[mailto:[EMAIL PROTECTED]]On Behalf Of Tom Brinkman
>Sent: Tuesday, 27 November 2001 2:19 AM
>To: [EMAIL PROTECTED]
>Subject: Re: [newbie] win32 badtrans worm.
>
>
>On Monday 26 November 2001 12:13 pm, Franki wrote:
>
>> you might want to check your system Frank...
>> Franki
>
>   You need to check your system Franki since you sent with:
>
>X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
>X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
>Importance: Normal
>
>   WHICH is a guaranteed virus transmission propagater to other
>Windoze users, and pretty much fsck'ups the Net in general, even
>fellow Linux users who have to put up with the damage y'all
>propulgate to Net servers, and the stolen banwidth y'all suck up.
>
>   I dunno how to convince y'all   NEVER connect to the Net with, any
>M$ product. There is no way to secure or defend an M$ system.
>(period).  You can only buy/beg/borrow a bunch of ineffective
>firewalls and virus scanners for M$ crap. Then, the only thing you've
>accomplished is to fool yourself.
>
>   If you dual boot, delete anything Winblows has to do with
>connecting to the Net, unplug the phone line.  Then you've got some
>security, at least till you buy a CD or floppy with a winblows virus
>on it.  Buy a real modem and use a real OS to connect.
>
>  It amazes me that some people who do run Linux (part time), believe
>that connecting with Windoze is a good, or even tolerable idea.
>Specially on this (Linux) list. Winsux virus warnings to this list
>are OFF TOPIC, immaterial, and border on ridiculous. Post these
>warnings to (ignorant, computer illiterate) Winblows users lists and
>newsgroups. You'll be very busy on a daily basis  ... mostly you'll
>be weeks, even months and years behind
>
> Jeez, in a perfect world, Winblows users wouldn't be allowed to
>connect.
>
>  ... there ought'a be a law
>
>--
>  Tom Brinkman Galveston Bay, USA
>
>
>
>
>Want to buy your Pack or Services from MandrakeSoft? 
>Go to http://www.mandrakestore.com




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-26 Thread Tom Brinkman

On Monday 26 November 2001 03:56 pm, Franki wrote:
> yes, normally I agree with you,
>
> but I have tightened it up abit,

 Abit, like Sony, Canon, and Asus, mostly sells stuff by name 
recognition, not continued quality , YMMV 
>
> many things in IE are turned off, outlook uses txt only, 

>>  You can only buy/beg/borrow a bunch of ineffective
>> firewalls and virus scanners for M$ crap. Then, the only thing
>> you've accomplished is to fool yourself.

   Like I said Franki. 

   Anyway, this childish script kiddie foolery only affects (other 
than stealin Net bandwidth) those that cling to M$ crap, has no place 
on this list ... an since I rarely comment on such, I'm sign' off on 
this subject.  

-- 
  Tom Brinkman             Galveston Bay, USA



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



RE: [newbie] win32 badtrans worm.

2001-11-26 Thread Franki

yes, normally I agree with you,

but I have tightened it up abit,

many things in IE are turned off, outlook uses txt only, there is a firewall
on this box, and it also sits behind my linux firewall..

and its win2000SP2, which in and of itself does not mean much, but its far
more secure then win98, which again, isn't saying much.. but the fact is
that I have never been infected on this box for anything, due to my
paranoia...
(Tiny firewall, PC-cillan and Innoculate all running at all times, and like
I said, it sits behind a linux box and it gets its mail from a linux server
that uses amavis and postfix to check all incoming and outgoing mail for
Virus's...

I only got franks email because the pattern file on the mail server was two
days old, and apparently the virus is newer..
I just updated it and sent the virus though, and its all working fine.


Thanks for the  concern though... :-)


rgds


Frank



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Tom Brinkman
Sent: Tuesday, 27 November 2001 2:19 AM
To: [EMAIL PROTECTED]
Subject: Re: [newbie] win32 badtrans worm.


On Monday 26 November 2001 12:13 pm, Franki wrote:

> you might want to check your system Frank...
> Franki

   You need to check your system Franki since you sent with:

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal

   WHICH is a guaranteed virus transmission propagater to other
Windoze users, and pretty much fsck'ups the Net in general, even
fellow Linux users who have to put up with the damage y'all
propulgate to Net servers, and the stolen banwidth y'all suck up.

   I dunno how to convince y'all   NEVER connect to the Net with, any
M$ product. There is no way to secure or defend an M$ system.
(period).  You can only buy/beg/borrow a bunch of ineffective
firewalls and virus scanners for M$ crap. Then, the only thing you've
accomplished is to fool yourself.

   If you dual boot, delete anything Winblows has to do with
connecting to the Net, unplug the phone line.  Then you've got some
security, at least till you buy a CD or floppy with a winblows virus
on it.  Buy a real modem and use a real OS to connect.

  It amazes me that some people who do run Linux (part time), believe
that connecting with Windoze is a good, or even tolerable idea.
Specially on this (Linux) list. Winsux virus warnings to this list
are OFF TOPIC, immaterial, and border on ridiculous. Post these
warnings to (ignorant, computer illiterate) Winblows users lists and
newsgroups. You'll be very busy on a daily basis  ... mostly you'll
be weeks, even months and years behind

 Jeez, in a perfect world, Winblows users wouldn't be allowed to
connect.

  ... there ought'a be a law

--
  Tom Brinkman             Galveston Bay, USA






Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com



Re: [newbie] win32 badtrans worm.

2001-11-26 Thread Tom Brinkman

On Monday 26 November 2001 12:13 pm, Franki wrote:

> you might want to check your system Frank...
> Franki

   You need to check your system Franki since you sent with:

X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0)
X-Mimeole: Produced By Microsoft MimeOLE V5.50.4807.1700
Importance: Normal

   WHICH is a guaranteed virus transmission propagater to other 
Windoze users, and pretty much fsck'ups the Net in general, even 
fellow Linux users who have to put up with the damage y'all 
propulgate to Net servers, and the stolen banwidth y'all suck up.

   I dunno how to convince y'all   NEVER connect to the Net with, any 
M$ product. There is no way to secure or defend an M$ system. 
(period).  You can only buy/beg/borrow a bunch of ineffective 
firewalls and virus scanners for M$ crap. Then, the only thing you've 
accomplished is to fool yourself.

   If you dual boot, delete anything Winblows has to do with 
connecting to the Net, unplug the phone line.  Then you've got some 
security, at least till you buy a CD or floppy with a winblows virus 
on it.  Buy a real modem and use a real OS to connect.

  It amazes me that some people who do run Linux (part time), believe 
that connecting with Windoze is a good, or even tolerable idea. 
Specially on this (Linux) list. Winsux virus warnings to this list 
are OFF TOPIC, immaterial, and border on ridiculous. Post these 
warnings to (ignorant, computer illiterate) Winblows users lists and 
newsgroups. You'll be very busy on a daily basis  ... mostly you'll 
be weeks, even months and years behind

 Jeez, in a perfect world, Winblows users wouldn't be allowed to 
connect. 

  ... there ought'a be a law

-- 
  Tom Brinkman             Galveston Bay, USA




Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com