Re: virus targeting list?
I got one too but some unpronouncable name and it contained the Magistr worm. Recognized by the title which contins the colured logo for VirusAlert. If you get it don't open it , just delete it. In spite of what Mr. Norton says Norton Anti Virus 2000 with all current updates doesn't catch it. Ralph Cameron EMC Consulting and Suppression of Consumer Electronics (After sale) - Original Message - From: "George Stults" To: Sent: Friday, August 17, 2001 5:17 PM Subject: virus targeting list? > > Hello Group, > > This is a little off topic but possibly of interest. I just received an > email from a location in Mexico, from someone I don't know at some college, > that contained the virus 'sircam.' I thought it might be of interest > because EMCPSTC is the only forum I'm monitoring and responding to, so I'm > guessing that someone on the list got hit and that it may be that many of > you will see it as well. > > Here is a link that talks about it: > > http://www.datafellows.com/v-descs/sircam.shtml > > The message you'll see is like this: > > From: [user@address] > To: [user@address] > Subject: [document name without extension] > > Hi! How are you? > > 'I send you this file in order to have your advice' > or > > 'I hope you can help me with this file that I send' > or > > 'I hope you like the file that I sendo you' > or > > 'This is the file with the information that you ask for' > > See you later. Thanks > If a system's language is set to Spanish the worm sends messages in Spanish: > > > Hola como estas ? > > 'Te mando este archivo para que me des tu punto de vista' > or > > 'Espero me puedas ayudar con el archivo que te mando' > or > > 'Espero te guste este archivo que te mando' > or > > 'Este es el archivo con la informaci n que me pediste' > > Nos vemos pronto, gracias. > > > Needless to say, delete it. > > Regards, > > George Stults > > > > --- > This message is from the IEEE EMC Society Product Safety > Technical Committee emc-pstc discussion list. > > Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ > > To cancel your subscription, send mail to: > majord...@ieee.org > with the single line: > unsubscribe emc-pstc > > For help, send mail to the list administrators: > Michael Garretson:pstc_ad...@garretson.org > Dave Healddavehe...@mediaone.net > > For policy questions, send mail to: > Richard Nute: ri...@ieee.org > Jim Bacher: j.bac...@ieee.org > > All emc-pstc postings are archived and searchable on the web at: > http://www.rcic.com/ click on "Virtual Conference Hall," > > --- This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ To cancel your subscription, send mail to: majord...@ieee.org with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Michael Garretson:pstc_ad...@garretson.org Dave Healddavehe...@mediaone.net For policy questions, send mail to: Richard Nute: ri...@ieee.org Jim Bacher: j.bac...@ieee.org All emc-pstc postings are archived and searchable on the web at: http://www.rcic.com/ click on "Virtual Conference Hall,"
Re: virus targeting list?
Hi George and Ravinder: We really like to discourage off-topic discussions, including virus warnings. Here are some points I'd like to make: 1. The IEEE majordomo listserver includes virus checking (for known viruses) of all messages posted to the listserver. IEEE virus checking is reasonably up-to- date. To our knowledge, the IEEE majordomo software has never forwarded a virus. (Also see item 4.) 2. We discourage all mail formats except ASCII text. I believe ASCII text cannot transmit a virus. If you are using Outlook or a similar mailer, we suggest you use the "plain text" option when posting to emc-pstc. (I'm not sure if Netscape mail has a "plain text" feature.) 3. We discourage attachments of any kind. As far as I know, viruses are in attachments, not in ASCII text. Majordomo has an attachment limit of 100k, so emc-pstc messages rarely have attachments. (We probably should be discouraging V-card and similar signature attachments.) 4. Some viruses will use addresses from saved mail messages themselves, not just the address book. So, if a message was posted by you to emc-pstc and ends up in a mailbox that is attacked by a virus, then you will probably get that virus. 5. Some viruses insert bogus addresses into the From line. So, you can't rely on the virus as having been sent from the address on the message header. 6. A virus cannot post a message to emc-pstc (except from your mailbox). We have a closed list; only subscribers can post messages to emc-pstc. 7. If you have not posted a message to emc-pstc, then no one (except majordomo and the admins) know your e-mail address. This means that if you have not posted a message to emc-pstc, then the address used by the virus did not come from emc-pstc. We feel we have some pretty good controls on virus- spreading via emc-pstc. We have no control over what happens when your posted message with your address ends up in a mailbox that is subject to a virus attack. Your address can be forwarded to anyone anywhere in the world. That's one of the risks of e-mail, and it is multiplied if you post messages to a listserver such as emc-pstc. If you have received an .exe attachment to an emc-pstc message, please contact me or one of the other admins at the footer to the emc-pstc messages. We don't want even a new virus to be forwarded by majordomo. Armed with this info, we'll see what we can do to prevent any such future distribution. If you want to discuss this further, please do so off- line. I, as well as our admins, would be happy to discuss further any virus issues and the emc-pstc listserver. With best regards, Rich --- This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ To cancel your subscription, send mail to: majord...@ieee.org with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Michael Garretson:pstc_ad...@garretson.org Dave Healddavehe...@mediaone.net For policy questions, send mail to: Richard Nute: ri...@ieee.org Jim Bacher: j.bac...@ieee.org All emc-pstc postings are archived and searchable on the web at: http://www.rcic.com/ click on "Virtual Conference Hall,"
Re: virus targeting list?
George, I remember receiving couple of messages in the format described by you, with an .exe file attached. In both cases, the name of the sender was garbled. As a rule, I simply delete such messages from unknown sources which come with .exe attachments. Regards, Ravinder PCB Development and Design Department IBM Corporation Email: ajm...@us.ibm.com *** Always do right. This will gratify some people and astonish the rest. . Mark Twain George Stults cc: Sent by: Subject: virus targeting list? owner-emc-pstc@majordom o.ieee.org 08/17/2001 02:17 PM Please respond to George Stults Hello Group, This is a little off topic but possibly of interest. I just received an email from a location in Mexico, from someone I don't know at some college, that contained the virus 'sircam.' I thought it might be of interest because EMCPSTC is the only forum I'm monitoring and responding to, so I'm guessing that someone on the list got hit and that it may be that many of you will see it as well. Here is a link that talks about it: http://www.datafellows.com/v-descs/sircam.shtml The message you'll see is like this: From: [user@address] To: [user@address] Subject: [document name without extension] Hi! How are you? 'I send you this file in order to have your advice' or 'I hope you can help me with this file that I send' or 'I hope you like the file that I sendo you' or 'This is the file with the information that you ask for' See you later. Thanks If a system's language is set to Spanish the worm sends messages in Spanish: Hola como estas ? 'Te mando este archivo para que me des tu punto de vista' or 'Espero me puedas ayudar con el archivo que te mando' or 'Espero te guste este archivo que te mando' or 'Este es el archivo con la informaci n que me pediste' Nos vemos pronto, gracias. Needless to say, delete it. Regards, George Stults --- This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ To cancel your subscription, send mail to: majord...@ieee.org with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Michael Garretson:pstc_ad...@garretson.org Dave Healddavehe...@mediaone.net For policy questions, send mail to: Richard Nute: ri...@ieee.org Jim Bacher: j.bac...@ieee.org All emc-pstc postings are archived and searchable on the web at: http://www.rcic.com/ click on "Virtual Conference Hall," --- This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ To cancel your subscription, send mail to: majord...@ieee.org with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Michael Garretson:pstc_ad...@garretson.org Dave Healddavehe...@mediaone.net For policy questions, send mail to: Richard Nute: ri...@ieee.org Jim Bacher: j.bac...@ieee.org All emc-pstc postings are archived and searchable on the web at: http://www.rcic.com/ click on "Virtual Conference Hall,"
virus targeting list?
Hello Group, This is a little off topic but possibly of interest. I just received an email from a location in Mexico, from someone I don't know at some college, that contained the virus 'sircam.' I thought it might be of interest because EMCPSTC is the only forum I'm monitoring and responding to, so I'm guessing that someone on the list got hit and that it may be that many of you will see it as well. Here is a link that talks about it: http://www.datafellows.com/v-descs/sircam.shtml The message you'll see is like this: From: [user@address] To: [user@address] Subject: [document name without extension] Hi! How are you? 'I send you this file in order to have your advice' or 'I hope you can help me with this file that I send' or 'I hope you like the file that I sendo you' or 'This is the file with the information that you ask for' See you later. Thanks If a system's language is set to Spanish the worm sends messages in Spanish: Hola como estas ? 'Te mando este archivo para que me des tu punto de vista' or 'Espero me puedas ayudar con el archivo que te mando' or 'Espero te guste este archivo que te mando' or 'Este es el archivo con la informaci n que me pediste' Nos vemos pronto, gracias. Needless to say, delete it. Regards, George Stults --- This message is from the IEEE EMC Society Product Safety Technical Committee emc-pstc discussion list. Visit our web site at: http://www.ewh.ieee.org/soc/emcs/pstc/ To cancel your subscription, send mail to: majord...@ieee.org with the single line: unsubscribe emc-pstc For help, send mail to the list administrators: Michael Garretson:pstc_ad...@garretson.org Dave Healddavehe...@mediaone.net For policy questions, send mail to: Richard Nute: ri...@ieee.org Jim Bacher: j.bac...@ieee.org All emc-pstc postings are archived and searchable on the web at: http://www.rcic.com/ click on "Virtual Conference Hall,"