Re[2]: can I change RE: into something else?
On Tuesday, August 12, 2003, 12:26:19 PM, Spike wrote: S I refuse to deal with fancified and bloated HTML mail, especially S with all the security risks they introduce. Half of my clients were S hit with BLASTER yesterday, and I am laughing hysterically at all of S them that I warned and tried to switch to TB! Those that listened are S humming along without a care :-) So if I'm running *only* TB, on Win2K, I don't need to worry about this Blaster thing, right? 'Cause I've been trying to update my virus definitions on AVG all morning not getting anywhere :-( -- Deborah Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Lex, In a message with mid:[EMAIL PROTECTED] On 12 Aug 2003 11:05:13 (my local time 12:05:13), you typed: LT Could I change the RE: into something of my own language? Is there a LT macro somewhere? (haven't found one yet) I wouldn't do that if I were you. Outlook distress does this and this causes very, very long subject lines. For example: I'm from Sweden and OE translates re: to sv:, if i'm on an english speaking mailing list or use the sv: string to a mailer that uses re:, a subject line that has been used for a while could look something like: sv: re: sv: re: sv: re: sv: an awfully long subject line, and i don't think that's good. Of course, since TB is so flexible, you could use a macro and some filtering based on language, if that's possible. Just my 2 cents. - -- - -- /Krister mailto:[EMAIL PROTECTED] This mail brought to you by The bat! V2.0 Beta/1, on Windows XP 5 1 build 2600 Pgp keys available here: Mailto:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0.2 iQA/AwUBPzjvMDg5SXqDEzkLEQKYuQCeIeX4KskEGYLTSJzfUzWwI5/f5BMAnAyB AGbB+lLyoEZq0BlUwNKda1s1 =yf0P -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Tuesday, August 12, 2003, 1:05:28 PM, Spike wrote: S The risk is MINIMAL as long as you have not altered the S default settings in TB! This is under Options Preferences S Warnings. As long as you don't EXECUTE any questionable S attachment that comes through, you will probably be OK. I'm a little confused about by what you're saying. My reading of the MS bulletin says Blaster is a worm that propagates via the RPC ports. If you're on-line and nothing is blocking ports 135, 139, 445 you can get infected even without e-mail. Does Blaster also propagate via e-mail? If so, then TB!'s warnings about executing attachments will make a difference. PS - Thank you to Alexander [EMAIL PROTECTED] (neuroWerx) for his pointer to the Symantec Blaster scanner/removal tool. I'm running it now. Here's the link for others who might have missed that post: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html H. The tool just crashed with a memory error after running for several minutes. Has anyone else run this? -- Dave Kennedy Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Stuart, @12-Aug-2003, 14:58 Stuart Hemming [SH] in mid:[EMAIL PROTECTED] said: KE Umm, now look, I don't want to sound peckish, (or how you say) Picky or pedantic - unless you really mean a little hungry g. KE but the correct tag should be: Edwin_Star /Edwin_Star SH Yes, but you are assuming that I know that that was the name of SH the guy who first recorded it. I'd only just listen to another SH FGTH track and that name stuck. I believe they were two different songs. And the original was by the Temptations, of which Edwin Starr was but a member. They sang War? Huh! Good god, y'all! What is it good for? (absolutely nothin'). I don't recall FGTH covering that track but they did record Two Tribes, which IIRC made literary reference to the Temptation's earlier work. - -- Cheers, - .\\arck - -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPzkHbTnkJKuSnc2gEQKbsgCdG+DoFn01dRPQIzfo8ZyFs47YHcMAnA1n Ag7i8xRKv9QUlwoHpUZWiPqb =znNw -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Stuart, @12-Aug-2003, 14:58 Stuart Hemming [SH] in mid:[EMAIL PROTECTED] said: KE Umm, now look, I don't want to sound peckish, (or how you say) KE but the correct tag should be: Edwin_Star /Edwin_Star SH Yes, but you are assuming that I know that that was the name of the SH guy who first recorded it. I'd only just listen to another FGTH track SH and that name stuck. moderator Note: This moderator's interjection is a note to all readers and not just to the person being replied to, even if their post may have instigated this reply. Please don't feel singled out Stuart. OT alert! (do I hear a trout flapping?) - up to TBOT please - where I shall correct you both! /moderator - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v2.0 Beta/1 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPzkGHznkJKuSnc2gEQKqkACfQPNmKKfDPRDSuZVa1YGYZokA/m0An3nT BrWCZsMLjlxEHuU3mVswYzQf =BxfJ -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
12-Aug-2003 19:00, [EMAIL PROTECTED] wrote: A Whats the status, anyway? Can someone lighten me up? :) I just wonder as A there's a 1.63beta-xx, AND a 2.0beta-x now... For most accurate information join TBBETA. :-) I didn't mean information about the beta, but what will the next release version be? 1.63 final? 2.0? The latter sounds like a bigger step to me... -- Best regards, Alexander (http://www.neurowerx.de) If all the drugs in the pharmacopoeia, with a few exceptions, were thrown into the sea, it would be better for mankind and the worse for the fishes. -- Oliver Wendell Holmes Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Tuesday, August 12, 2003, Krister Ekstrom wrote: For example: I'm from Sweden snip Just my 2 cents. I see you have already made up your mind on how to vote :-) For you non-Swedes: We will vote on the EMU in September. -- Urban Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hi Lex, on Tue, 12 Aug 2003 11:05:13 +0100GMT (12.08.03, 12:05 +0200GMT here), you wrote in mid:[EMAIL PROTECTED] : LT Could I change the RE: into something of my own language? Is there a LT macro somewhere? (haven't found one yet) I'm sure it can be done with Regular Expressions, but I don't understand them well enough to say exactly how... LT As well, what does the numbering exactly do, when it says RE(3): for LT example. I guess it's something to do with threading, but what is it LT good for exactly? I see no use for the numbering of replies. You can turn it off altogether in Account -- Properties -- Templates -- Reply by unchecking the entry or you can insert the macro %SINGLERE anywhere in a particular reply template. -- Cheers Peter It takes more than three weeks to prepare a good impromptu speech. Mark Twain Winamp currently playing: - silence - Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hi Stuart, In a message with mid:[EMAIL PROTECTED] On 12 Aug 2003 11:07:31 (my local time 12:07:31), you typed: SH frankie_goes_to_holliwood LT ... what is it good for ... SH Absolutely nothing! SH /frankie_goes_to_holliwood Umm, now look, I don't want to sound peckish, (or how you say) but the correct tag should be: Edwin_Star /Edwin_Star (Or how that chap now spells his name), it was him who made the song war in the 1970-s. -- -- /Krister mailto:[EMAIL PROTECTED] This mail brought to you by The bat! V2.0 Beta/1, on Windows XP 5 1 build 2600 Pgp keys available here: Mailto:[EMAIL PROTECTED] Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
BLASTER WORM - was Re: can I change RE: into something else?
Hello Deborah W, On or about Tuesday, August 12, 2003 at 12:43:13GMT -0400 (which was 11:43 AM in the tropics where I live) Deborah W posted: DW On Tuesday, August 12, 2003, 12:26:19 PM, Spike wrote: S I refuse to deal with fancified and bloated HTML mail, especially S with all the security risks they introduce. Half of my clients S were hit with BLASTER yesterday, and I am laughing hysterically at S all of them that I warned and tried to switch to TB! Those that S listened are humming along without a care :-) DW So if I'm running *only* TB, on Win2K, I don't need to worry about DW this Blaster thing, right? 'Cause I've been trying to update my DW virus definitions on AVG all morning not getting anywhere :-( The risk is MINIMAL as long as you have not altered the default settings in TB! This is under Options Preferences Warnings. As long as you don't EXECUTE any questionable attachment that comes through, you will probably be OK. If you are accessing any webmail accounts, be VERY VERY careful. Under any NT system, which is NT-4, WIN2K or XP, the worm shuts down critical system utilities (processes) which in turn causes your system to INVOLUNTARILY shut down repeatedly. There is one saving grace, as if you are NOT ONLINE, the system will remain stable, and only becomes unstable after an internet connection is established, at least that has been my experience, YMMV. I understand that this is an EXTREMELY widespread issue, so most of the AV sites worldwide are being slammed by the sudden traffic. My phone is ringing off the hook on this, which has never happened before. I suspect we will see a large increase in TB! users, at least in MY territory. :-) -- Warmest tropical wishes, Spike Quote for the moment: A cometary impact before breakfast may spoil the rest of your day! /\ ASCII Ribbon Campaign - Against HTML Mail \ / If it aint a webpage it shouldn't be HTML. XSay NO! to bloatmail - ban HTML mail! / \ Ask Spikey, he hates everything (HTML). -- Using TheBat! v1.62r hamstrung by Windows XP 5.1 Build 2600 Service Pack 1' -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Jernej Simoni, On or about Tuesday, August 12, 2003 at 18:05:35GMT +0200 (which was 11:05 AM in the tropics where I live) Jernej Simoni posted: Apologies! This was supposed to go to TBOT. I changed the address. TB changed it back while I wasn't looking. Not folder templates, but v2 changed template handling... :-( JS Of course, blame the program! :) I think we ALL will have a steep learning curve once TB V2.0 releases. I know there'd better be a quick and efficient way to DISABLE all the HTML crappola before I start to use it! If not, I'll either stay with V1.xx or start to search and audition once again.. I refuse to deal with fancified and bloated HTML mail, especially with all the security risks they introduce. Half of my clients were hit with BLASTER yesterday, and I am laughing hysterically at all of them that I warned and tried to switch to TB! Those that listened are humming along without a care :-) This one's a real nasty one, especially in NT/WIN2K and XP. It repeatedly shuts down the system involuntarily until removed! Most were infected by employees accessing personal Hotmail in a browser. The update to the Norton AV files lagged the infection by about 9 hours, and unless you updated after 4PM-EST yesterday, you are still vulnerable! Not sure about other AV programs. I don't use any of them, but my client base is entirely NAV by corporate decree. http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.html -- Warmest tropical wishes, Spike Quote for the millenium: Vacuum: A large, empty space where the pope lives. /\ ASCII Ribbon Campaign - Against HTML Mail \ / If it aint a webpage it shouldn't be HTML. XSay NO! to bloatmail - ban HTML mail! / \ Ask Spikey, he hates everything (HTML). -- Using TheBat! v1.62r hamstrung by Windows XP 5.1 Build 2600 Service Pack 1' -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Hello tbudlers, Further to this, you MUST make sure that your Windows installation has been FULLY patched with all the latest updates. This vulnerability has been addressed, but ONLY if you have regularly and RELIGIOUSLY executed all the updates. If you fail to do this, you are vulnerable. Almost ALL the infections I have found have been traced to users accessing their Hotmail from a browser. There are other vectors of infection, but this seems to be the common thread. ALL my clients have a prohibition against employees accessing webmail at work, but they are not ENFORCING it, much to their detriment. I have one law firm that is TOTALLY down with no machines working in the office at present. They are all XP machines, which figures! I will be leaving for their offices shortly after I send this. There is a tool available to check for (and remove) BLASTER at: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html -- Warmest tropical wishes, Spike Quote for the nanosecond: Ability is a good thing but stability is even better. /\ ASCII Ribbon Campaign - Against HTML Mail \ / If it aint a webpage it shouldn't be HTML. XSay NO! to bloatmail - ban HTML mail! / \ Ask Spikey, he hates everything (HTML). -- Using TheBat! v1.62r hamstrung by Windows XP 5.1 Build 2600 Service Pack 1' -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
12-Aug-2003 18:43, [EMAIL PROTECTED] wrote: So if I'm running *only* TB, on Win2K, I don't need to worry about this Blaster thing, right? I'm afraid you're wrong. Blaster doesn't spread over email at all, it uses a vulnerability in Windows NT4, 2000 or XP. You should read MS security bulletin MS03-26 and download install the patch ASAP. It seems people are not aware what execute code of attackers choice means. It could delete any files that are not locked by running processes and your system is gone. The Blaster worm is only some 6kB - we've already had one customer on a 33.6 modem connection that was infected, its faster than you can say Blaster (ok, that rhymes and thats the only reason I wrote this). 'Cause I've been trying to update my virus definitions on AVG all morning not getting anywhere :-( Chances are you're already infected (Blaster is trying to infect other computer once its running and can really load your Internet connection). You can scan your system with this free tool from Symantec: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html -- Best regards, Alexander (http://www.neurowerx.de) Life is an endless struggle full of frustrations and challenges, but eventually you find a hair stylist you like. Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
12-Aug-2003 19:05, [EMAIL PROTECTED] wrote: The risk is MINIMAL as long as you have not altered the default settings in TB! This is under Options Preferences Warnings. As long as you don't EXECUTE any questionable attachment that comes through, you will probably be OK. Sorry for continuing this OT thread, but I find it highly important. Spike, what you write is just plain wrong. Blaster is not dependant on email *at all*. Please, don't spread half-knowledge and confuse people with it. The only permanent cure against Blaster (or any other worm that is yet to come, exploiting the same vunerability) is to close Port 135, 139, 445 for remote access from the internet with a firewall (even the built-in fw in WinXP will do) and install the KB823980 patch from MS. *Anyone* with WinNT4, 2000 or XP is advised to do so immediately, read MS03-26. -- Best regards, Alexander (http://www.neurowerx.de) The release of atom power has changed everything except our way of thinking...the solution to this problem lies in the heart of mankind. If only I had known, I should have become a watchmaker. -- Albert Einstein Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
On Tuesday, August 12, 2003, 17:52:58, Marck D Pearlstone wrote: Apologies! This was supposed to go to TBOT. I changed the address. TB changed it back while I wasn't looking. Not folder templates, but v2 changed template handling... :-( Of course, blame the program! :) -- Jernej Simoncic, [EMAIL PROTECTED] http://www2.arnes.si/~sopjsimo/ http://deepthought.ena.si/ I hear that if you play the Windows XP CD backwards, you get a satanic message. That's nothing. If you play it forward, it installs Windows XP! Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Stuart, Tuesday, August 12, 2003, 10:05:10 AM, you wrote: SH Duck! Incoming Trout. Whipping out Trout v2.351b Preparing to slap Oops, forgot to turn it on. hang on a sec Bwhaa (sound like power packs on Ghostbusters) -- Leif (TB list moderator and fellow end user). Using The Bat! 2.0 Beta/1 under Windows 2000 5.0 Build 2195 Service Pack 3 on a Pentium 4 2GHz with 512MB Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
12-Aug-2003 19:15, [EMAIL PROTECTED] wrote: H. The tool just crashed with a memory error after running for several minutes. Has anyone else run this? If ran it on various WinXP systems today without problems. -- Best regards, Alexander (http://www.neurowerx.de) Almost anything you do will be insignificant, but it is very important that you do it. -- Mohandas K. Gandhi Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hi Alexander, on Tue, 12 Aug 2003 18:41:24 +0200GMT (12.08.03, 18:41 +0200GMT here), you wrote in mid:[EMAIL PROTECTED] : A Whats the status, anyway? Can someone lighten me up? :) I just wonder as A there's a 1.63beta-xx, AND a 2.0beta-x now... The latest beta being tested is 2.0b1. It is based on 1.63b11 and, of course, all previous betas are also still around... ;-) The second beta version of 2.0 is announced for one of these days. For most accurate information join TBBETA. :-) -- Cheers Peter Sex is hereditary. If your parents never had it, chances are you won't either. Winamp currently playing: Blondie - Ring My Bell Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Leif, On Tue, 12 Aug 2003 10:23:37 -0600 GMT (12/08/2003, 23:23 +0700 GMT), Leif Gregory wrote: Error - Trout failure... Grrr. Dang Betas... :-( ROTFL! -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. If you don't like the news, go out and make some. Message reply created with The Bat! 2.0 Beta/1 under Chinese Windows 98 4.10 Build A using a Pentium P4 1.7 GHz, 128MB RAM Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 ,- [ Potential 'Missed Joke' error at line 3 ] | Stuart, op Tuesday, August 12, 2003, 11:07:31 AM, schreef jij: | | SH Absolutely nothing! | | good, that gives reason for hope... `- - -- Stuart Using The Bat! v1.63 Beta/11 on Windows XP 5.1 Build 2600 Service Pack 1 PGP Key available from ldap://keyserver.pgp.com ... Sometimes I lie awake at night, and I ask, Where have I gone wrong? a voice says to me, This is going to take more than one night. (Charlie Brown) -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0 iQA/AwUBPzi/1NttnLhkydF1EQKbcQCdH2EXrt+c8P/yxscVv5nB184KivcAoPhp 3MAF82cdQKMcku5pUaOYe7QW =eksw -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: Trout beta - was Re: can I change RE: into something else?
Hello Mark, Tuesday, August 12, 2003, 6:34:40 PM, you wrote: MW ...I leave town for a few days and look what happens... Is there a MW new Trout beta? How can I get my very own copy? Musta been using MW the wrong bait... It's a very limited beta. Apparently there are some serious problems with this one as there are reports of some moderators who have been spontaneously trouted by their own beta trout. It's a very ugly situation indeed. However, it appears you'll be able to at least taste the trout as follows: moderator wielding trout This moderator's interjection is a note to all readers and not just to the person being replied to, even if their post may have instigated this reply. Please don't feel singled out Mark. Please include a signature delimiter in your messages. This consists of a dashdashspacereturn, i.e., a '-- ' by itself on a line. This allows your readers, when replying, to quote your text without the signature and list footers since everything below and including the sig delimiter is excluded when quoting. You can easily automate this process by including the sig delimeter in your templates. Thank you. moderator wielding trout grin -- Leif (TB list moderator and fellow end user). Using The Bat! 2.0 Beta/1 under Windows 2000 5.0 Build 2195 Service Pack 3 on a Pentium 4 2GHz with 512MB Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Alexander, Tuesday, August 12, 2003, 2:17:10 PM, you wrote: 12-Aug-2003 19:00, [EMAIL PROTECTED] wrote: A Whats the status, anyway? Can someone lighten me up? :) I just wonder as A there's a 1.63beta-xx, AND a 2.0beta-x now... For most accurate information join TBBETA. :-) I didn't mean information about the beta, but what will the next release version be? 1.63 final? 2.0? The latter sounds like a bigger step to me... Actually, 1.63 beta changed to 2.0 beta. So, the next version will be 2.0. -- Best regards, Daniel Rail Senior System Engineer ACCRA Group Inc. (www.accra.ca) ACCRA Med Software Inc. (www.filopto.com) Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 KE Umm, now look, I don't want to sound peckish, (or how you say) but the KE correct tag should be: Edwin_Star /Edwin_Star Yes, but you are assuming that I know that that was the name of the guy who first recorded it. I'd only just listen to another FGTH track and that name stuck. - -- Stuart Using The Bat! v1.63 Beta/11 on Windows XP 5.1 Build 2600 Service Pack 1 PGP Key available from ldap://keyserver.pgp.com ... Pretentious? Moi? -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0 iQA/AwUBPzjybNttnLhkydF1EQK3BwCg6uTrIc0Gvdqldb0FzM5CkrGnza4AmgMm jETtmXg9vDwWUAuoLXBmvbCT =+ZQu -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 frankie_goes_to_holliwood LT ... what is it good for ... Absolutely nothing! /frankie_goes_to_holliwood - -- Stuart Using The Bat! v1.63 Beta/11 on Windows XP 5.1 Build 2600 Service Pack 1 PGP Key available from ldap://keyserver.pgp.com ... Everything should be made as simple as possible, but no simpler. -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0 iQA/AwUBPzi8bNttnLhkydF1EQLc8QCg8+qcBYgxsRHcUftVwIgme14B5JwAn32q 6HuFjO1FFHejrimycu3tVuMq =JGPv -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 MDP Apologies! This was supposed to go to TBOT. Duck! Incoming Trout. - -- Stuart Using The Bat! v1.63 Beta/11 on Windows XP 5.1 Build 2600 Service Pack 1 PGP Key available from ldap://keyserver.pgp.com ... What is a free gift? Aren't all gifts free? -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0 iQA/AwUBPzkQN9ttnLhkydF1EQI4YQCgqtJOU87iBcm/R1g83wh0p9KWcMMAoIIF ELIjrAGCQcRgLY45b14qQ3+q =xlz3 -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: BLASTER WORM - was Re: can I change RE: into something else?
Tuesday, August 12, 2003, 1:42:40 PM, Thomas wrote: T OK. I'm running Win98, so I'm not vulnerable, right? (This is T the first question.) Here is a layman's article about Blaster. http://money.cnn.com/2003/08/12/technology/msft_worm.reut/index.htm?cnn=yes PS - My apologies for the OT continuance, as well. I hope that the urgency of this nasty worm is sufficient cause for dispensation from the TBUDL powers-that-be! :) -- Dave Kennedy Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Marck, In a message with mid:[EMAIL PROTECTED] On 12 Aug 2003 16:27:39 (my local time 17:27:39), you typed: MDP I believe they were two different songs. And the original was by the MDP Temptations, of which Edwin Starr was but a member. Nope, actually FGTH did a cover on the song you quoted. But as i recall, Star did that as a solo number, but just to get the facts streight, i'll check that out. - -- - -- /Krister mailto:[EMAIL PROTECTED] This mail brought to you by The bat! V2.0 Beta/1, on Windows XP 5 1 build 2600 Pgp keys available here: Mailto:[EMAIL PROTECTED] -BEGIN PGP SIGNATURE- Version: PGP SDK 3.0.2 iQA/AwUBPzkeszg5SXqDEzkLEQLAOwCgoxfcpHfRF30Ie0BbBlY/ZRQyPr4An1oi pwSP28rYG776uRp9qGZ4ILvs =RLNA -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: can I change RE: into something else?
Stuart, op Tuesday, August 12, 2003, 11:07:31 AM, schreef jij: SH Absolutely nothing! good, that gives reason for hope... -- Muy atentamente, Lex Thoonen Pêng Smart Web Design http://www.peng.nl http://www.gran-canaria-info.com http://www.hollandsenieuwe.com phone: +34 680 641368 Calle Tajo 50, Caserones Altos 35218 Telde Gran Canaria Spain Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
can I change RE: into something else?
Hi, Could I change the RE: into something of my own language? Is there a macro somewhere? (haven't found one yet) As well, what does the numbering exactly do, when it says RE(3): for example. I guess it's something to do with threading, but what is it good for exactly? Thanks. -- Muy atentamente, Lex Thoonen Pêng Smart Web Design http://www.peng.nl http://www.gran-canaria-info.com http://www.hollandsenieuwe.com phone: +34 680 641368 Calle Tajo 50, Caserones Altos 35218 Telde Gran Canaria Spain Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Stuart, Tuesday, August 12, 2003, 10:05:10 AM, you wrote: SH Duck! Incoming Trout. Whipping out Trout v2.351b Preparing to slap Oops, forgot to turn it on. hang on a sec Bwhaa (sound like power packs on Ghostbusters) Nothing like ruining a good setup by accidentally sending before you were done... growl cough, sputter, Brrrww Error - Trout failure... Grrr. Dang Betas... :-( -- Leif (TB list moderator and fellow end user). Using The Bat! 2.0 Beta/1 under Windows 2000 5.0 Build 2195 Service Pack 3 on a Pentium 4 2GHz with 512MB Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 @13-Aug-2003, 16:13 Marck [MDP] in mid:[EMAIL PROTECTED] said to Dave: MDP Date : 12-Aug-2003, 13:15 -0400 (18:15 UK time) MDP From : Dave Kennedy [EMAIL PROTECTED] MDP Refr : mid:[EMAIL PROTECTED] More apologies. I was trying to forward this warning to someone else (who has been infected) and TBv2, yet again, changed the darned address back!!! Sorry folks. I must remember that it's doing that!!! :-( - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v2.0 Beta/1 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPzpcfTnkJKuSnc2gEQK9MACg4nAOJ9TRV9gi5HQ+HBDFUJFKa38AoLCx fCRUp97qk9/yxpOGsZ4lMr+b =v3Sz -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
OT: Re: BLASTER WORM - was Re: can I change RE: into something else?
Hello All, moderator While the moderators certainly wish to foster a community within the TB users so that we can all help each other, this thread would be more suitable for discussion on the TBOT lists. 1. This is not an e-mail centric worm. 2. It has nothing to do with TB even remotely. 3. Most of the ground has been covered here on TBUDL Please continue this on TBOT (I've CC'd the TBOT list with this message to continue the thread there.) Thank you. /moderator -- Leif (TB list moderator and fellow end user). Using The Bat! 2.0 Beta/1 under Windows 2000 5.0 Build 2195 Service Pack 3 on a Pentium 4 2GHz with 512MB Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: BLASTER WORM - was Re: can I change RE: into something else?
On Tuesday, August 12, 2003, 1:23:08 PM, Alexander wrote: A The only permanent cure against Blaster (or any other worm that is A yet to come, exploiting the same vunerability) is to close Port 135, A 139, 445 for remote access from the internet with a firewall (even A the built-in fw in WinXP will do) and install the KB823980 patch from A MS. *Anyone* with WinNT4, 2000 or XP is advised to do so immediately, A read MS03-26. Okay, so should my *firewall* have protected me then? I don't seem to be experiencing any problems, other than difficulties downloading from AVG (which I suspect has more to do with their servers being over-run by people doing the same thing than anything about my computer). I'm running the Symantec tool anyway, have dl'd the patch to install right afterwards. Oh, the Symantec tool has just finished, it says I'm clean :-). Off to install the patch now :-) -- Deborah Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hi Alexander, on Tue, 12 Aug 2003 19:17:10 +0200GMT (12.08.03, 19:17 +0200GMT here), you wrote in mid:[EMAIL PROTECTED] : For most accurate information join TBBETA. :-) A I didn't mean information about the beta, But that's the only information available as yet... A but what will the next release version be? 1.63 final? 2.0? The A latter sounds like a bigger step to me... Next release will be 2.x, but don't ask when... ;-) -- Cheers Peter abbr. is the abbr. for abbr. Winamp currently playing: Man - The Missing Pieces Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Trout beta - was Re: can I change RE: into something else?
Leif- ...I leave town for a few days and look what happens... Is there a new Trout beta? How can I get my very own copy? Musta been using the wrong bait... -Mark Wieder Using The Bat! v1.63 Beta/7 on Windows 2000 5.0 Build 2195 Service Pack 2 -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Date : 12-Aug-2003, 13:15 -0400 (18:15 UK time) From : Dave Kennedy [EMAIL PROTECTED] Refr : mid:[EMAIL PROTECTED] Original Message ~ Tuesday, August 12, 2003, 1:05:28 PM, Spike wrote: S The risk is MINIMAL as long as you have not altered the S default settings in TB! This is under Options Preferences S Warnings. As long as you don't EXECUTE any questionable S attachment that comes through, you will probably be OK. I'm a little confused about by what you're saying. My reading of the MS bulletin says Blaster is a worm that propagates via the RPC ports. If you're on-line and nothing is blocking ports 135, 139, 445 you can get infected even without e-mail. Does Blaster also propagate via e-mail? If so, then TB!'s warnings about executing attachments will make a difference. PS - Thank you to Alexander [EMAIL PROTECTED] (neuroWerx) for his pointer to the Symantec Blaster scanner/removal tool. I'm running it now. Here's the link for others who might have missed that post: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html H. The tool just crashed with a memory error after running for several minutes. Has anyone else run this? -- Dave Kennedy Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html ~ End of Original Message ~ Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Hello Spike, On Tue, 12 Aug 2003 12:23:46 -0500 GMT your local time, which was Wednesday, August 13, 2003, 12:23:46 AM (GMT+0700) my local time, Spike wrote: There is a tool available to check for (and remove) BLASTER at: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html Am downloading it as I guess I will be busy, Sofar none of my customers have been hit -- Best regards, tracer Using theBAT 1.63 Beta/11 mail to : [EMAIL PROTECTED] C.C.S. Associates FAX (USA): (208) 460-3753 pgp 6.5.3 : 0x909D9B10 Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Lex, On 12 Aug 2003 at 11:05:13 +0100 GMT [12:05 CEST] you wrote: LT Hi, LT Could I change the RE: into something of my own language? Is there a LT macro somewhere? (haven't found one yet) Not a good idea as other MUAs won't recognize it. German Outlook does this and you end up with Re: AW: some subject. What's wrong with Re? -- Cheers, Andre Avoid overly pretentious job titles such as 'Lord of the Realm, Defender of the Faith, Emporer of Siberia' or 'Director of Corporate Planning'. ~ The Official MBA Handbook on business cards Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Ah, yes... the layman's article. I love the fact that the web link for MS is http://cgi.money.cnn.com/mgi/mgi_search?QUERY=MSFT and there's no link for downloading the patches to fix things up. -Mark Wieder Using The Bat! v1.63 Beta/7 on Windows 2000 5.0 Build 2195 Service Pack 2 -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re[2]: BLASTER WORM - was Re: can I change RE: into something else?
Greetings tracer! port 135 critical mass day. maybe time to start selling prebuilt stand alone firewalls again eh? Problem is - talking new users into the necessity. Days like today are good days to sell sell sell! Here is a nice photo. Wish my stocks looked like this: http://isc.sans.org/images/port135percent.png ps: Long time no hear. ;o) On Tuesday, August 12, 2003 at 06:32:12 GMT +0700 (which was 4:32 PM where you think I live) [EMAIL PROTECTED] said: t Spike wrote: There is a tool available to check for (and remove) BLASTER at: http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html t Am downloading it as I guess I will be busy, Sofar none of my t customers have been hit -- --- The Bat! 3.9 Beta/8 + w2K3 ... na na na na na na na na na nay The Bat! gets is mail so fast today. * Origin: Private Gateway to Outer-Space (88:888/8) Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
12-Aug-2003 18:26, [EMAIL PROTECTED] wrote: I think we ALL will have a steep learning curve once TB V2.0 releases. Whats the status, anyway? Can someone lighten me up? :) I just wonder as there's a 1.63beta-xx, AND a 2.0beta-x now... -- Best regards, Alexander (http://www.neurowerx.de) On the keyboard of life, always keep one finger on the escape key. Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Hello Spike, On Tue, 12 Aug 2003 12:23:46 -0500 GMT (13/08/2003, 00:23 +0700 GMT), Spike wrote: Further to this, you MUST make sure that your Windows installation has been FULLY patched with all the latest updates. This vulnerability has been addressed, but ONLY if you have regularly and RELIGIOUSLY executed all the updates. If you fail to do this, you are vulnerable. Almost ALL the infections I have found have been traced to users accessing their Hotmail from a browser. OK. I'm running Win98, so I'm not vulnerable, right? (This is the first question.) My friend checked his Hotmail on my computer. Would he have had to have downloaded anything to cause an infection, or would opening a mail received by Hotmail have sufficed? (This is the second question.) http://www.sarc.com/avcenter/venc/data/w32.blaster.worm.removal.tool.html This website has been loading for ages. May be over-loaded... -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. CHRISTOPHER HOPE was disappointed by the warning he spotted on a gallon container of the laboratory disinfectant Hibitane. Avoid contact with brain, it told him, thereby spoiling his plans for a fun-filled afternoon drilling holes in his skull and pouring disinfectant into them. Message reply created with The Bat! 2.0 Beta/1 under Chinese Windows 98 4.10 Build A using a Pentium P4 1.7 GHz, 128MB RAM Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
Hello Spike, On Tue, 12 Aug 2003 11:26:19 -0500 GMT (12/08/2003, 23:26 +0700 GMT), Spike wrote: I think we ALL will have a steep learning curve once TB V2.0 releases. I know there'd better be a quick and efficient way to DISABLE all the HTML crappola before I start to use it! If not, I'll either stay with V1.xx or start to search and audition once again.. While the v2-beta series incorporates a rudimentary HTML editor, there is still no problem with incoming HTML mails. You'll still be safe. -- Cheers, Thomas. Moderator der deutschen The Bat! Beginner Liste. ...und wir gingen mit unserer Lehrerin im Park spazieren. Gegenueber dem Park war ein Haus, wo die Muetter ihre Kinder gebaeren. Eine Gebaermutter schaute aus dem Fenster und winkte uns freudig zu. Message reply created with The Bat! 2.0 Beta/1 under Chinese Windows 98 4.10 Build A using a Pentium P4 1.7 GHz, 128MB RAM Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
On Tue 12-Aug-03 6:05am -0400, Lex Thoonen wrote: Could I change the RE: into something of my own language? Is there a macro somewhere? (haven't found one yet) Just change Re: to whatever you like in your Clean Subject qt. As well, what does the numbering exactly do, when it says RE(3): for example. I guess it's something to do with threading, but what is it good for exactly? It's good for nothing. It's a shame that RitLabs sets this numbering as the default. -- Best regards, Bill Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: BLASTER WORM - was Re: can I change RE: into something else?
Hello Alexander, On or about Tuesday, August 12, 2003 at 19:23:08GMT +0200 (which was 12:23 PM in the tropics where I live) Alexander posted: A Sorry for continuing this OT thread, but I find it highly A important. A Spike, what you write is just plain wrong. Blaster is not dependant A on email *at all*. Please, don't spread half-knowledge and confuse A people with it. I'm just going by my EXPERIENCE here _in the Cayman Islands_. The common denominator is UNPATCHED Windows installations AND access to webmail by people violating company protocols. There are many who are uninfected, despite being on the same network and node of an infected system, but have not accessed webmail. ALL my clients run the built- in WIN-XP firewall, which may account for this. *Anyone* with WinNT4, 2000 or XP is advised to do so immediately, read MS03-26. A thorough search of the Microshaft site for this 'MS03-26' returned _NO ON-TOPIC_ hits! I ran into this before when someone sent me this last week. The MS site is very poorly indexed, if you ask me! However this came up in a search for KB823980: Download details: Windows Server 2003 64-Bit Edition Security Patch: Buffer Overrun In RPC Interface Could Allow Code Execution http://www.microsoft.com/downloads/details.aspx?displaylang=enfamilyid=2b566973-c3f0-4ec1-995f-017e35692bc7 Download details: Windows 2000 Security Patch: Buffer Overrun In RPC Interface Could Allow Code Execution http://www.microsoft.com/downloads/details.aspx?displaylang=enfamilyid=c8b8a846-f541-4c15-8c9f-220354449117 Download details: Windows XP Security Patch: Buffer Overrun In RPC Interface Could Allow Code Execution http://www.microsoft.com/downloads/details.aspx?displaylang=enfamilyid=2354406c-c5b6-44ac-9532-3de40f69c074 823980 - MS03-026: Buffer Overrun in RPC Interface May Allow Code Execution http://support.microsoft.com/default.aspx?scid=kb;en-us;823980 Microsoft Security Bulletin MS03-026 http://www.microsoft.com/technet/security/bulletin/ms03-026.asp Thanks for the information. The 'market' here is very isolated, and my remarks were based upon real-life experience in this market. I have an unpatched WIN2K system on an open ADSL connection with NO FIREWALL (a test system) that is unaffected at this time, and by all expectations SHOULD be by now. I use this system exclusively to record local radio talk shows with a program called 'Total Recorder.' Only in the last few months has XP become commonplace here, and over 50% of corporate clients here still run WIN98 or NT-4 on their average desktop. The most common server here is still NT-4. Any 'misleading' information was unintended. I'll say no more on this topic, if only because it is trout bait. -- Warmest tropical wishes, Spike Quote for the nanosecond: Heaven can wait, Hell is often a bit more aggressive. /\ ASCII Ribbon Campaign - Against HTML Mail \ / If it aint a webpage it shouldn't be HTML. XSay NO! to bloatmail - ban HTML mail! / \ Ask Spikey, he hates everything (HTML). -- Using TheBat! v1.62r hamstrung by Windows XP 5.1 Build 2600 Service Pack 1' -- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
Re: can I change RE: into something else?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi Marck, @12-Aug-2003, 16:27 Marck D Pearlstone [MDP] in mid:[EMAIL PROTECTED] said to Stuart: MDP I believe they were two different songs. Apologies! This was supposed to go to TBOT. I changed the address. TB changed it back while I wasn't looking. Not folder templates, but v2 changed template handling... :-( - -- Cheers -- .\\arck D Pearlstone -- List moderator TB! v2.0 Beta/1 on Windows XP 5.1.2600 Service Pack 1 -BEGIN PGP SIGNATURE- Version: PGPsdk version 1.7.1 (C) 1997-1999 Network Associates, Inc. and its affiliated companies. iQA/AwUBPzkNWznkJKuSnc2gEQLC7ACfXolrztrsc2++FFnF8HB0+NI9g9YAnjHZ TIfxcrYcBdlXapDOJsLJMW0g =zQWJ -END PGP SIGNATURE- Current version is 1.62r | Using TBUDL information: http://www.silverstones.com/thebat/TBUDLInfo.html
