Yes, these are viruses... we encountered these attachments on our mail
server...
At 11:19 PM 12/08/2000 +0800, you wrote:
>Hello,
>
>Subscribers to our family mailing list at e-groups are complaining about
>virus infections and I noticed some messages have no subject, no text, only
>attachments, and they are all the same size. are these files virus?
>
>Any information will be apreciated.
>
>Thank you very much.
>
>----- Forwarded message from Juan Miguel Cacho <[EMAIL PROTECTED]>
-----
>
>To: Cacho Family e-group <[EMAIL PROTECTED]>
>X-Mailer: Mutt-1.2i (Linux-2.2.17 i686)
>Organization: PhilOnline-Bombastar
>From: Juan Miguel Cacho <[EMAIL PROTECTED]>
>Date: Fri, 8 Dec 2000 16:56:25 +0800
>Reply-To: [EMAIL PROTECTED]
>Subject: [Cacho-Family] I think I found it!!
>
>Family,
>
>While investigating the virus reports I noticed that the following e-mails
>are all the same size, they have no subjects and they contain attachments
>that can only run under Win95/98. I don't know what these attachments are,
>but this could be it.
>
> Sep 26 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: JIMI_HMNDRIX.MP3.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Oct 11 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: ANTI_CIH.EXE --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Oct 21 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: YOU_are_FAT!.TXT.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Nov 06 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: BILL_GATES_PIECE.JPG.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Dec 05 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: BILL_GATES_PIECE.JPG.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Dec 08 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: Geocities_Free_sites.TXT.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
> Dec 08 [EMAIL PROTECTED] ( 24K) [Cacho-Family] (unknown)
>[-- Attachment #1: Geocities_Free_sites.TXT.pif --]
>[-- Type: application/octet-stream, Encoding: base64, Size: 24K --]
>
>
>
>These e-mails do not contain any messages, just attachments. I request
>everybody to update your virus software and check your computers right away.
>
>
>--
>Juan Miguel Cacho [EMAIL PROTECTED] �
>Philippines [EMAIL PROTECTED]
>...the poor count their blessings, the affluent count their calories.
>
>-------------------------- eGroups Sponsor -------------------------~-~>
>eGroups eLerts
>It's Easy. It's Fun. Best of All, it's Free!
>http://click.egroups.com/1/9698/1/_/123468/_/976267162/
>---------------------------------------------------------------------_->
>
>The Cacho Web Page:
>http://www.geocities.com/EnchantedForest/Meadow/9637
>Cacho Family e-group:
>http://www.egroups.com/group/cacho-family/
>
>
>
>----- End forwarded message -----
>
>--
>Juan Miguel Cacho [EMAIL PROTECTED] �
>Philippines [EMAIL PROTECTED]
>...the poor count their blessings, the affluent count their calories.
>
>_
>Philippine Linux Users Group. Web site and archives at
http://plug.linux.org.ph
>To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
>
>
Ernesto V. Herrera, Jr.
Web Administrator
Pan Pacific Computer Center, Inc.
3/F GREPALIFE BLDG.
221 Sen. Gil J. Puyat Ave. Makati City
---------------------------------------
"All data are fraudulent.
All communications are attempted hacks.
All clients are thieves.
Technology is only my first line of defense"
- morning litany for a Web Server Administrator
_
Philippine Linux Users Group. Web site and archives at http://plug.linux.org.ph
To leave: send "unsubscribe" in the body to [EMAIL PROTECTED]
