Re: Exploit.IFrame.FileDownload virus??

2002-07-17 Thread Luke Ross
wing the message with the default viewer (only), >my virus protector popped up with a message to the effect >that c:\tmp\mutt-mutt-LEPIDUS-2136-12 was infected with >the Exploit.IFrame.FileDownload virus. Before deleting, >I looked at its file entry -- it was roughly 250k and bore >a time-

Re: Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Matthew D. Fuller
On Mon, Jul 15, 2002 at 04:56:04PM +0200 I heard the voice of Thomas Baker, and lo! it spake thus: > saying "Your password is 12zxjkjl123kjl12jz". But the > size of each of the messages, according to Mutt, was 65k. > > that use it, such as Outlook. No surprise there! The only > surprise to me

Re: Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Thomas Baker
On Mon, Jul 15, 2002 at 10:57:42AM -0500, Rich wrote: > > According to F-Secure Web site, this is a virus that exploits > > a flaw in Internet Explorer, and by extension mail readers > > that use it, such as Outlook. No surprise there! The only > > surprise to me is

Re: Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Rich
Mutt, was 65k. > After viewing the message with the default viewer (only), > my virus protector popped up with a message to the effect > that c:\tmp\mutt-mutt-LEPIDUS-2136-12 was infected with > the Exploit.IFrame.FileDownload virus. Before deleting, > I looked at its file entry --

Re: Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Thomas Baker
On Mon, Jul 15, 2002 at 04:22:02PM +0100, Dave Smith wrote: > On Mon, Jul 15, 2002 at 04:56:04PM +0200, [EMAIL PROTECTED] wrote: > > According to F-Secure Web site, this is a virus that exploits > > a flaw in Internet Explorer, and by extension mail readers > > that use it,

Re: Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Dave Smith
On Mon, Jul 15, 2002 at 04:56:04PM +0200, [EMAIL PROTECTED] wrote: > According to F-Secure Web site, this is a virus that exploits > a flaw in Internet Explorer, and by extension mail readers > that use it, such as Outlook. No surprise there! The only > surprise to me is that 250k i

Exploit.IFrame.FileDownload virus??

2002-07-15 Thread Thomas Baker
I use Cygwin Mutt 1.2.5i (2000-07-05) on Win2000 and just got messages from two people with a short text message saying "Your password is 12zxjkjl123kjl12jz". But the size of each of the messages, according to Mutt, was 65k. After viewing the message with the default viewer (only)

Re: virus

2002-01-18 Thread David T-G
Prahlad -- ...and then Prahlad Vaidyanathan said... % ... % ps. Is there a mutt port running on Windows ? In which case (s)he might % be an innocent mutt-user :-) There is, I hear, though I haven't tried it yet. I'd be quite surprised, though, if such a machine would spread

Re: virus

2002-01-17 Thread Prahlad Vaidyanathan
Hi, On Thu, 17 Jan 2002 Carl B . Constantine spewed into the ether: > Some nut is actually using Outlook for this list. I just got an email in > response to one I posted from [EMAIL PROTECTED] that had a virus > attached to it (.mp3.pif). Something similar happened on another list I&

Re: virus

2002-01-17 Thread Cameron Simpson
On 12:00 17 Jan 2002, David T-G <[EMAIL PROTECTED]> wrote: | % response to one I posted from [EMAIL PROTECTED] that had a virus | % attached to it (.mp3.pif). | That's just a Program Information File, or what Win uses to remember how | to run a DOS program. I wonder what "mp

Re: virus

2002-01-17 Thread Will Yardley
Michael P. Soulier wrote: > > Such things are harmless, if inappropriate to this list. Lets not > forget however, that Mutt recently was found to be susceptible to a > buffer overflow that could be spread through an email, no? Thankfully > it was quickly patched, and thanks to Debian, I had it up

Re: virus

2002-01-17 Thread Michael P. Soulier
On 17/01/02 David Champion did speaketh: > Viruses/worms can be embedded in a .pif file. The point of using .pif > is that Windows software frequently considers it to indicate executable > content that should be automatically executed when double-clicked. > Irregularities in the PIF data can caus

Re: virus

2002-01-17 Thread Derek D. Martin
At some point hitherto, Knute hath spake thusly: > On Thu, 17 Jan 2002, Carl B . Constantine wrote: > > > > >Some nut is actually using Outlook for this list. I just got an email in > >response to one I posted from [EMAIL PROTECTED] that had a virus > >attac

Re: virus

2002-01-17 Thread David Champion
On 2002.01.17, in <20020117164300.GB3131@knute>, "Knute" <[EMAIL PROTECTED]> wrote: > >response to one I posted from [EMAIL PROTECTED] that had a virus > >attached to it (.mp3.pif). > > LOL... That's not even a virus, it's a shortcut to

Re: virus

2002-01-17 Thread David T-G
ECTED] that had a virus % attached to it (.mp3.pif). That's just a Program Information File, or what Win uses to remember how to run a DOS program. I wonder what "mp3" is... on that system, anyway. % % -- % Carl B. Constantine University of Victoria % Programmer Ana

Re: virus

2002-01-17 Thread Knute
On Thu, 17 Jan 2002, Carl B . Constantine wrote: > >Some nut is actually using Outlook for this list. I just got an email in >response to one I posted from [EMAIL PROTECTED] that had a virus >attached to it (.mp3.pif). LOL... That's not even a virus, it's a shortcut to

Re: virus

2002-01-17 Thread Nick Wilson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 * On 17-01-02 at 17:19 * Carl B . Constantine said > Some nut is actually using Outlook for this list. I just got an email in > response to one I posted from [EMAIL PROTECTED] that had a virus > attached to it (.mp3.pif). Which nu

virus

2002-01-17 Thread Carl B . Constantine
Some nut is actually using Outlook for this list. I just got an email in response to one I posted from [EMAIL PROTECTED] that had a virus attached to it (.mp3.pif). -- Carl B. Constantine University of Victoria Programmer Analyst http://www.uvic.ca UNIX System

OT: Re: virus

2001-03-15 Thread Jan Johansson
out 4000 printf bugs waiting to happen. >> Default is to hide the file extension so that we also get the >> nice problem of sexygirl.jpg.vbs, is it a nice girl or a >> virus? > >Eudora tells you (or used to tell you, didnt use it for a while) >that where it saved t

Re: virus

2001-03-12 Thread Suresh Ramasubramanian
Kai Blin proclaimed on mutt-users that: > Anyway, I don't think a luser would refrain opening a file called > sexygirl.jpg.vbs if a friend of his sent it and said it was a nice > picture, would he? Or the other variants of the hybris worm - F*g with dogs.scr.vbs was one (one of my collea

Re: virus

2001-03-12 Thread Kai Blin
an say email is safe for me (with mutt/pine/whatever) because I'm smart enough. This email attachment stuff seems like computer darwinism to me :) > Default is to hide the file extension so that we also get the > nice problem of sexygirl.jpg.vbs, is it a nice girl or a virus? Eudora tells

Re: virus

2001-03-07 Thread Gary Johnson
On Wed, Mar 07, 2001 at 02:28:38PM +0800, Horace G. Friend III wrote: > How can I include all headers for my reply. I had to get out of this msg > to take a look at the above Received hdr? :set header :unset weed Gary -- Gary Johnson | Agilent Technologi

Re: virus

2001-03-07 Thread Ken Weingold
is empty and I've read somewhere that Unices (including Linux) bothered > by viruses. So I bounced this file back to myself so that I can download it > again from windoze where I've got two anti-virus programs to check on this. > > I did that this morning (from windoze) and

Re: virus

2001-03-07 Thread Jan Johansson
hide the file extension so that we also get the nice problem of sexygirl.jpg.vbs, is it a nice girl or a virus? In other words Outlook, IE and VBS engine are all parts in the wounderfull VRE [1] called Windows. [1] Virus Runtime Enviroment. -- Security only costs $30. http://www.openbsd.org/

Re: virus

2001-03-07 Thread Joe Philipps
ested, I would suggest investing in VMware for GNU/Linux or similar, and set up an "undo-able" machine/Win32 installation/instance/whatever. Then you can boot this VM, let the potential virus tear apart your VM in whatever way it wants, and then just hit VMware's undo function an

Re: virus

2001-03-07 Thread Frank Derichsweiler
On Wed, Mar 07, 2001 at 02:28:38PM +0800, Horace G. Friend III wrote: > that I'd like to know what options do I have. Can I save this AHAOFIA.EXE > to my hdd w/o harm to my system? ... so that I can send it as an attachment > to my email to Norton and PC-cillin? Yes, that should not harm your _L

virus

2001-03-07 Thread Horace G. Friend III
again from windoze where I've got two anti-virus programs to check on this. I did that this morning (from windoze) and when I try to save the file my PC just locks with a black screen and two horizontal lines spaced apart by about 3 inches. None of my anti-virus apps detected it and all my av