Re:
On Sun, 24 Jun 2001, Matthew J Craven wrote: > > I found that the headers are not 'normal' for mails from the sam list. > > I also found it intersting that the words HELO wolfgang" appear in the > > headers. > > Is this list open for posting to non members ? > > It shouldn't be! It's a subscribers-only service isn't it? It is. But non-members can still post to it - I've done so myself in the past. Bad form, I know, but... -- Mark
RE: strange unknown executable
Its is a Virus , and normal course for these types is it appears with TXT saying , " Piccys" . It is also normally sent after a real email is sent , so that would indicate WomoTeam It contains one of the nastiest thing on net @ moo , a Bot , this will stay on your machine , and only known cure is to FDisk. What it does is well written all over net , best place to read about this stuff is http://grc.com Well that woke up the list C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Colin Piggot Sent: 24 June 2001 12:31 To: sam-users@nvg.ntnu.no Subject: Re: strange unknown executable > Did anyone else get this executable with this mail header There's no way > in hell I'm going to run it! Yes, i got it too... it got trashed straight away! Colin Quazar : Hardware and Software for the Sam http://www.quazar.clara.net/sam/
Re:
-Oorspronkelijk bericht- Van: Paul Walker <[EMAIL PROTECTED]> Aan: sam-users@nvg.ntnu.no Datum: zondag 24 juni 2001 13:47 Onderwerp: Re: >At 13:22 24/06/01 +0200, sam-users@nvg.ntnu.no wrote: > > > > >I almost certainly don't need to say it, but... don't run that file, it >contains the Hybris virus/worm/trojan/whatever. Bad news. As i guessed. BTW: Martijn, woensdag gaat niet door helaas. Robert van der Veeke aka RJVgraphics [EMAIL PROTECTED] Currently: Listening to Tomb Raider OST Many people in the world (maybe even 100 or more) don't even know who I am - David Lees sharing his place alongside Bob Brenchley & Rocketshite -
Re:
On Sun, Jun 24, 2001 at 05:50:13PM +0100, Nev Young wrote: > I found that the headers are not 'normal' for mails from the sam list. > I also found it intersting that the words HELO wolfgang" appear in the > headers. Read RFC2821 and RFC2822. It's just an MTA screwing up somewhere. -- Paul
Re:
> I found that the headers are not 'normal' for mails from the sam list. > I also found it intersting that the words HELO wolfgang" appear in the > headers. > Is this list open for posting to non members ? It shouldn't be! It's a subscribers-only service isn't it?
Re: strange unknown executable
On Sun, Jun 24, 2001 at 06:18:42PM +0200, [EMAIL PROTECTED] wrote: > According to a service called Spamcop the message traces back to the > folowing email address: > > [EMAIL PROTECTED] All that tells you is the email address responsible for the originating network. It doesn't tell you who sent the email to start with. And in this case, SpamCop got it wrong; that's much more likely to be someone responsible for nvg.ntnu.no, since the email originated from a German ISP. ie don't send abuse reports to that address. ;-) -- Paul "Computers may be stupid, but they're always obedient. Well, almost always." -- Larry Wall (Open Sources, 1999 O'Reilly and Associates)
Re:
On Sun, Jun 24, 2001 at 05:38:03PM +0100, Nev Young wrote: > I suggest a report to abuse for the original poster. I suggest probably not, or if you do then word it carefully, because these things are usually spread by users who have no idea that their software is infected. -- Paul "It stands for 'Sales and Marketing', you depraved monkeys." "A rose by any other name, Stef." - http://www.userfriendly.org/
Re:
On Sun, 24 Jun 2001 13:22:23 +0200, <> wrote: I found that the headers are not 'normal' for mails from the sam list. I also found it intersting that the words HELO wolfgang" appear in the headers. Is this list open for posting to non members ? Nev > Return-Path: <[EMAIL PROTECTED]> > Received: from punt-1.mail.demon.net by mailstore > for [EMAIL PROTECTED] id 993381793:10:24435:3; > Sun, 24 Jun 2001 11:23:13 GMT > Received: from sabre-wulf.nvg.ntnu.no ([129.241.210.67]) > by punt-1.mail.demon.net id aa1123205; 24 Jun 2001 11:22 GMT > Received: ([EMAIL PROTECTED]) by sabre-wulf.nvg.ntnu.no > id ; Sun, 24 Jun 2001 13:22:27 +0200 > Received: from pD9E4081F.dip.t-dialin.net ([IPv6::::217.228.8.31]:58372 > "HELO wolfgang" ident: "NO-IDENT-SERVICE[2]" whoson: "-unregistered-") > by sabre-wulf.nvg.ntnu.no with SMTP id ; > Sun, 24 Jun 2001 13:22:23 +0200 > MIME-Version: 1.0 > Content-Type: multipart/mixed; boundary="--VEHM7WP" > Message-Id: <[EMAIL PROTECTED]> > From: <> > To: unlisted-recipients:; (no To-header on input) > Date: Sun, 24 Jun 2001 13:22:23 +0200 > Sender: [EMAIL PROTECTED] > Precedence: bulk > Reply-To: sam-users@nvg.ntnu.no -- Nev - no longer at [EMAIL PROTECTED] and getting no spam at all (yet) Webpage under construction at www,nfy53,demon,co,uk also hiding on ICQ
Re:
On Sun, 24 Jun 2001 12:48:36 +0100, Paul Walker <[EMAIL PROTECTED]> wrote: > At 13:22 24/06/01 +0200, sam-users@nvg.ntnu.no wrote: > > > > > I almost certainly don't need to say it, but... don't run that file, it > contains the Hybris virus/worm/trojan/whatever. Bad news. Correst it is a virus. McAfee reports it as W32/[EMAIL PROTECTED] I suggest a report to abuse for the original poster. -- Nev - no longer at [EMAIL PROTECTED] and getting no spam at all (yet) Webpage under construction at www,nfy53,demon,co,uk also hiding on ICQ
Re: strange unknown executable
According to a service called Spamcop the message traces back to the folowing email address: [EMAIL PROTECTED] Does anyone know this person? Frans >> Did anyone else get this executable with this mail header There's >> no way in hell I'm going to run it! > > Yes, i got it too... it got trashed straight away! > > Colin > > Quazar : Hardware and Software for the Sam > http://www.quazar.clara.net/sam/
Re:
At 13:22 24/06/01 +0200, sam-users@nvg.ntnu.no wrote: I almost certainly don't need to say it, but... don't run that file, it contains the Hybris virus/worm/trojan/whatever. Bad news. -- Paul
Re: strange unknown executable
> Did anyone else get this executable with this mail header There's no way > in hell I'm going to run it! Yes, i got it too... it got trashed straight away! Colin Quazar : Hardware and Software for the Sam http://www.quazar.clara.net/sam/
strange unknown executable
Did anyone else get this executable with this mail header There's no way in hell I'm going to run it! >Received: from sabre-wulf.nvg.ntnu.no ([129.241.210.67]) by saturn.aculab.com with >SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2232.9) > id KTSA6HVP; Sun, 24 Jun 2001 12:22:46 +0100 >Received: ([EMAIL PROTECTED]) by sabre-wulf.nvg.ntnu.no > id ; Sun, 24 Jun 2001 13:22:27 +0200 >Received: from pD9E4081F.dip.t-dialin.net ([IPv6::::217.228.8.31]:58372 > "HELO wolfgang" ident: "NO-IDENT-SERVICE[2]" whoson: "-unregistered-") > by sabre-wulf.nvg.ntnu.no with SMTP id ; > Sun, 24 Jun 2001 13:22:23 +0200 >MIME-Version: 1.0>Content-Type: multipart/mixed; boundary="--VEHM7WP" >Message-Id: <[EMAIL PROTECTED]> >From: <> >To:unlisted-recipients:; (no To-header on input) >Date: Sun, 24 Jun 2001 13:22:23 +0200 >Sender:[EMAIL PROTECTED] >Precedence: bulk >Reply-To: sam-users@nvg.ntnu.no > >VEHM7WP >Content-Type: text/plain; charset="us-ascii" > >VEHM7WP >Content-Type: application/octet-stream; name="KHJCLJKH.EXE" >Content-Transfer-Encoding: base64 >Content-Disposition: attachment; filename="KHJCLJKH.EXE" > >VEHM7WP-- > -Original Message- > From: > Sent: Sunday, June 24, 2001 12:22 PM > To: unlisted-recipients > Subject: >
Mallard Basic
Hi Guys. An italien friend is looking for a Mallard-Basic manual. I know it is from the Spectrum+3, but some of you have or comes from the Speccy or has other contacts. If you know a source of an english documentation, then please let me know, I will give it further. Thanks foro your efforts. Wo from WoMo-Team
