Re: virus targeting list?

2001-08-18 Thread Rich Nute





Hi George and Ravinder:


We really like to discourage off-topic discussions,
including virus warnings.

Here are some points I'd like to make:

1.  The IEEE majordomo listserver includes virus checking
(for known viruses) of all messages posted to the 
listserver.  IEEE virus checking is reasonably up-to-
date.  To our knowledge, the IEEE majordomo software
has never forwarded a virus.  (Also see item 4.)

2.  We discourage all mail formats except ASCII text.
I believe ASCII text cannot transmit a virus.  If you
are using Outlook or a similar mailer, we suggest you
use the plain text option when posting to emc-pstc.
(I'm not sure if Netscape mail has a plain text
feature.)

3.  We discourage attachments of any kind.  As far as I 
know, viruses are in attachments, not in ASCII text.
Majordomo has an attachment limit of 100k, so emc-pstc
messages rarely have attachments.  (We probably should
be discouraging V-card and similar signature
attachments.)

4.  Some viruses will use addresses from saved mail 
messages themselves, not just the address book.  So,
if a message was posted by you to emc-pstc and ends 
up in a mailbox that is attacked by a virus, then 
you will probably get that virus.  

5.  Some viruses insert bogus addresses into the From 
line.  So, you can't rely on the virus as having been
sent from the address on the message header.

6.  A virus cannot post a message to emc-pstc (except 
from your mailbox).  We have a closed list; only 
subscribers can post messages to emc-pstc.

7.  If you have not posted a message to emc-pstc, then
no one (except majordomo and the admins) know your
e-mail address.  This means that if you have not
posted a message to emc-pstc, then the address used
by the virus did not come from emc-pstc.

We feel we have some pretty good controls on virus-
spreading via emc-pstc.

We have no control over what happens when your posted
message with your address ends up in a mailbox that is 
subject to a virus attack.  Your address can be forwarded 
to anyone anywhere in the world.  That's one of the risks 
of e-mail, and it is multiplied if you post messages to a 
listserver such as emc-pstc.

If you have received an .exe attachment to an emc-pstc
message, please contact me or one of the other admins at
the footer to the emc-pstc messages.  We don't want even
a new virus to be forwarded by majordomo.  Armed with 
this info, we'll see what we can do to prevent any
such future distribution.  

If you want to discuss this further, please do so off-
line.  I, as well as our admins, would be happy to discuss
further any virus issues and the emc-pstc listserver.


With best regards,
Rich




---
This message is from the IEEE EMC Society Product Safety
Technical Committee emc-pstc discussion list.

Visit our web site at:  http://www.ewh.ieee.org/soc/emcs/pstc/

To cancel your subscription, send mail to:
 majord...@ieee.org
with the single line:
 unsubscribe emc-pstc

For help, send mail to the list administrators:
 Michael Garretson:pstc_ad...@garretson.org
 Dave Healddavehe...@mediaone.net

For policy questions, send mail to:
 Richard Nute:   ri...@ieee.org
 Jim Bacher: j.bac...@ieee.org

All emc-pstc postings are archived and searchable on the web at:
http://www.rcic.com/  click on Virtual Conference Hall,




Re: virus targeting list?

2001-08-18 Thread Ravinder Ajmani


George,
I remember receiving couple of messages in the format described by you,
with an .exe file attached.  In both cases, the name of the sender was
garbled.  As a rule, I simply delete such messages from unknown sources
which come with .exe attachments.

Regards, Ravinder
PCB Development and Design Department
IBM Corporation
Email: ajm...@us.ibm.com
***
Always do right.  This will gratify some people and astonish the rest.
. Mark Twain




   
George Stults   
   
George.Stults@watchgua   To: emc-p...@ieee.org 
   
rd.com   cc:   
   
Sent by:  Subject: virus targeting 
list?   
owner-emc-pstc@majordom 
   
o.ieee.org  
   

   

   
08/17/2001 02:17 PM 
   
Please respond to   
   
George Stults   
   

   

   




Hello Group,

This is a little off topic but possibly of interest.  I just received an
email from a location in Mexico, from someone I don't know at some college,
that contained the virus 'sircam.'  I thought it might be of interest
because EMCPSTC is the only forum I'm monitoring and responding to, so I'm
guessing that someone on the list got hit and that it may be that many of
you will see it as well.

Here is a link that talks about it:

http://www.datafellows.com/v-descs/sircam.shtml

The message you'll see is like this:

From: [user@address]
 To: [user@address]
 Subject: [document name without extension]

 Hi! How are you?

 'I send you this file in order to have your advice'
or

 'I hope you can help me with this file that I send'
or

 'I hope you like the file that I sendo you'
or

 'This is the file with the information that you ask for'

 See you later. Thanks
If a system's language is set to Spanish the worm sends messages in
Spanish:


 Hola como estas ?

 'Te mando este archivo para que me des tu punto de vista'
or

 'Espero me puedas ayudar con el archivo que te mando'
or

 'Espero te guste este archivo que te mando'
or

 'Este es el archivo con la informaci n que me pediste'

 Nos vemos pronto, gracias.


Needless to say, delete it.

Regards,

George Stults



---
This message is from the IEEE EMC Society Product Safety
Technical Committee emc-pstc discussion list.

Visit our web site at:  http://www.ewh.ieee.org/soc/emcs/pstc/

To cancel your subscription, send mail to:
 majord...@ieee.org
with the single line:
 unsubscribe emc-pstc

For help, send mail to the list administrators:
 Michael Garretson:pstc_ad...@garretson.org
 Dave Healddavehe...@mediaone.net

For policy questions, send mail to:
 Richard Nute:   ri...@ieee.org
 Jim Bacher: j.bac...@ieee.org

All emc-pstc postings are archived and searchable on the web at:
http://www.rcic.com/  click on Virtual Conference Hall,






---
This message is from the IEEE EMC Society Product Safety
Technical Committee emc-pstc discussion list.

Visit our web site at:  http://www.ewh.ieee.org/soc/emcs/pstc/

To cancel your subscription, send mail to:
 majord...@ieee.org
with the single line:
 unsubscribe emc-pstc

For help, send mail to the list administrators:
 Michael Garretson:pstc_ad...@garretson.org
 Dave Healddavehe...@mediaone.net

For policy questions, send mail to:
 Richard Nute:   ri...@ieee.org
 Jim Bacher: j.bac...@ieee.org

All emc-pstc postings are archived and searchable on the web at:
http://www.rcic.com/  click on Virtual Conference Hall,




virus targeting list?

2001-08-17 Thread George Stults

Hello Group,

This is a little off topic but possibly of interest.  I just received an
email from a location in Mexico, from someone I don't know at some college,
that contained the virus 'sircam.'  I thought it might be of interest
because EMCPSTC is the only forum I'm monitoring and responding to, so I'm
guessing that someone on the list got hit and that it may be that many of
you will see it as well.

Here is a link that talks about it:  

http://www.datafellows.com/v-descs/sircam.shtml 

The message you'll see is like this:

From: [user@address]
 To: [user@address]
 Subject: [document name without extension]

 Hi! How are you?

 'I send you this file in order to have your advice'
or 

 'I hope you can help me with this file that I send'
or 

 'I hope you like the file that I sendo you'
or 

 'This is the file with the information that you ask for'

 See you later. Thanks
If a system's language is set to Spanish the worm sends messages in Spanish:


 Hola como estas ?

 'Te mando este archivo para que me des tu punto de vista'
or 

 'Espero me puedas ayudar con el archivo que te mando'
or 

 'Espero te guste este archivo que te mando'
or 

 'Este es el archivo con la informaci n que me pediste'

 Nos vemos pronto, gracias.
 

Needless to say, delete it.

Regards,

George Stults



---
This message is from the IEEE EMC Society Product Safety
Technical Committee emc-pstc discussion list.

Visit our web site at:  http://www.ewh.ieee.org/soc/emcs/pstc/

To cancel your subscription, send mail to:
 majord...@ieee.org
with the single line:
 unsubscribe emc-pstc

For help, send mail to the list administrators:
 Michael Garretson:pstc_ad...@garretson.org
 Dave Healddavehe...@mediaone.net

For policy questions, send mail to:
 Richard Nute:   ri...@ieee.org
 Jim Bacher: j.bac...@ieee.org

All emc-pstc postings are archived and searchable on the web at:
http://www.rcic.com/  click on Virtual Conference Hall,