Re: Someone on list with latest virus?
On Mon, Sep 22, 2003 at 11:07:27AM -0500, Andrew L. Gould wrote: patching/updating. I updated my Win2K with a critical update yesterday using Microsoft's online updating utility (no, not from an email link!); and it trashed the OS. The repair utilities on the installation CD have been useless. I now have to find the time to reinstall. I spent the night reviewing the list of apps I can't replace in FreeBSD. The list keeps getting smaller (along with the motivation to reinstall). You could try running Windows under FreeBSD with VMware 2 or 3 if your down to that few programs that don't have a replacement for. It has downsite but it could be worth thinking about. -- Alex Articles based on solutions that I use: http://www.kruijff.org/alex/index.php?dir=docs/FreeBSD/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
Andrew L. Gould wrote: I do my emailing from FreeBSD; but I empathize with any Windows user's fear of patching/updating. I updated my Win2K with a critical update yesterday using Microsoft's online updating utility (no, not from an email link!); and it trashed the OS. The repair utilities on the installation CD have been useless. I now have to find the time to reinstall. I spent the night reviewing the list of apps I can't replace in FreeBSD. The list keeps getting smaller (along with the motivation to reinstall). Andrew Gould Hmm, never had any trouble with WinXP or Win98 using Windows Update AFAICR. That said, I'm now running FBSD 5.1 alongside my Windows box, the the Windows screen is *behind* me and to the right. As I'm not much of a gamer, and my wife/kids have XP in the living room, I've already succumbed to the switch, and think I'm gonna like it. ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
I agree that a number of people on this list have been affected by the virus and it is really helpful of you to have posted to the list because those infected are sending out huge volumes of emails to some of us on the list. I would recomend that everyone on this list checks their system if it is vulnerable at the earliest opportunity and remove the virus from their system. I am receiving over 100 emails a day from infected systems. David - Original Message - From: Matthew Seaman [EMAIL PROTECTED] To: Timothy Luoma [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, September 21, 2003 6:09 AM Subject: Re: Someone on list with latest virus? ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
On Monday 22 September 2003 08:10 am, vizion communication wrote: I agree that a number of people on this list have been affected by the virus and it is really helpful of you to have posted to the list because those infected are sending out huge volumes of emails to some of us on the list. I would recomend that everyone on this list checks their system if it is vulnerable at the earliest opportunity and remove the virus from their system. I am receiving over 100 emails a day from infected systems. I agree and I am seeing similar quanties of virus infected emails. Since they are arriving from sites around the world, they have to be people on the FreeBSD lists. You can't do anything else and write all of their ISPs. The problem seem to be that a large number of people are using unpatched versions of Windows emailers. The fix to prevent infection by something as simple as previewing an email was made available at Microsoft's Windows update site (http://windowsupdate.microsoft.com) in 2001. Anyone with an infected computer can find disinfection instructions and a Recovery program at http://www.sophos.com/virusinfo/analyses/w32gibef.html Matthew's comment about the infection rate at Symmantec still seems to be appropriate. I have logged more than 20 sites and I am only doing 1 in 30+ sampling. Kent David - Original Message - From: Matthew Seaman [EMAIL PROTECTED] To: Timothy Luoma [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Sunday, September 21, 2003 6:09 AM Subject: Re: Someone on list with latest virus? -- Kent Stewart Richland, WA http://users.owt.com/kstewart/index.html ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
On Monday 22 September 2003 10:22 am, Kent Stewart wrote: On Monday 22 September 2003 08:10 am, vizion communication wrote: I agree that a number of people on this list have been affected by the virus and it is really helpful of you to have posted to the list because those infected are sending out huge volumes of emails to some of us on the list. I would recomend that everyone on this list checks their system if it is vulnerable at the earliest opportunity and remove the virus from their system. I am receiving over 100 emails a day from infected systems. I agree and I am seeing similar quanties of virus infected emails. Since they are arriving from sites around the world, they have to be people on the FreeBSD lists. You can't do anything else and write all of their ISPs. The problem seem to be that a large number of people are using unpatched versions of Windows emailers. The fix to prevent infection by something as simple as previewing an email was made available at Microsoft's Windows update site (http://windowsupdate.microsoft.com) in 2001. Anyone with an infected computer can find disinfection instructions and a Recovery program at http://www.sophos.com/virusinfo/analyses/w32gibef.html Matthew's comment about the infection rate at Symmantec still seems to be appropriate. I have logged more than 20 sites and I am only doing 1 in 30+ sampling. Kent David I do my emailing from FreeBSD; but I empathize with any Windows user's fear of patching/updating. I updated my Win2K with a critical update yesterday using Microsoft's online updating utility (no, not from an email link!); and it trashed the OS. The repair utilities on the installation CD have been useless. I now have to find the time to reinstall. I spent the night reviewing the list of apps I can't replace in FreeBSD. The list keeps getting smaller (along with the motivation to reinstall). Andrew Gould ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
On Mon, 22 Sep 2003, Kent Stewart wrote: I agree and I am seeing similar quanties of virus infected emails. Since they are arriving from sites around the world, they have to be people on the FreeBSD lists. There are several mail-to-news gateways that post the contents of the FreeBSD lists to newsgroups. This Windows-virus-of-the-week collects email addresses from newsgroups. So it's not necessarily true that any list member has the virus. Certainly anyone running an MUA on FreeBSD doesn't have it, or need to worry about getting it. -Warren Block * Rapid City, South Dakota USA ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Someone on list with latest virus?
This email address ([EMAIL PROTECTED]) started to receive the virus not long after I used it to post to this freebsd-(questions|mobile). Since the address was just created and has only been used for these two lists, it seems a good guess that someone here is infected. I don't know if the headers would be useful in tracking down who it is (may be more than one even) but here they are, FWIW. (I assume all the email addresses are forged by the virus) #1 Return-Path:[EMAIL PROTECTED] Received: from unknown (HELO sccrmhc12.comcast.net) (204.127.202.56) by square.phpwebhosting.com with SMTP; 21 Sep 2003 06:30:07 - Received: from sccrmhc12.comcast.net (localhost[127.0.0.1]) by comcast.net (sccrmhc12) with ESMTP id 2003092106300701200q9lqce; Sun, 21 Sep 2003 06:30:07 + Received: from znounx (12-229-238-35.client.attbi.com[12.229.238.35]) by comcast.net (sccrmhc12) with SMTP id 2003092106242001200r8ftoe; Sun, 21 Sep 2003 06:24:24 + #2 Return-Path:[EMAIL PROTECTED] Received: (qmail 5296 invoked from network); 21 Sep 2003 09:01:56 - Received: from unknown (HELO priv-edtnes56.telusplanet.net) (199.185.220.240) by square.phpwebhosting.com with SMTP; 21 Sep 2003 09:01:56 - Received: from fglokmnk ([154.5.65.172]) by priv-edtnes56.telusplanet.net (InterMail vM.5.01.05.17 201-253-122-126-117-20021021) with SMTP id [EMAIL PROTECTED]; Sun, 21 Sep 2003 03:01:51 -0600 #3 Return-Path:[EMAIL PROTECTED] Received: from unknown (HELO mailhub2.midco.net) (24.220.0.34) by square.phpwebhosting.com with SMTP; 21 Sep 2003 09:57:31 - Received: from host-68-172-220-24.midco.net (HELO oxyara) ([24.220.172.68]) (envelope-sender [EMAIL PROTECTED]) by lvs-pop.midco.net (qmail-ldap-1.03) with SMTP for [EMAIL PROTECTED]; 21 Sep 2003 09:57:19 - #4 Return-Path:[EMAIL PROTECTED] Received: from unknown (HELO rwcrmhc13.comcast.net) (204.127.198.39) by square.phpwebhosting.com with SMTP; 21 Sep 2003 12:16:36 - ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
On 21 Sep 2003 at 8:25, Timothy Luoma wrote: This email address ([EMAIL PROTECTED]) started to receive the virus not long after I used it to post to this freebsd-(questions|mobile). Since the address was just created and has only been used for these two lists, it seems a good guess that someone here is infected. I don't know if the headers would be useful in tracking down who it is (may be more than one even) but here they are, FWIW. A better destination for your messages would be the respective ISPs rather than the list members... -- Dan Langille : http://www.langille.org/ ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-questions To unsubscribe, send any mail to [EMAIL PROTECTED]
Re: Someone on list with latest virus?
On Sun, Sep 21, 2003 at 08:25:25AM -0400, Timothy Luoma wrote: This email address ([EMAIL PROTECTED]) started to receive the virus not long after I used it to post to this freebsd-(questions|mobile). Since the address was just created and has only been used for these two lists, it seems a good guess that someone here is infected. I don't know if the headers would be useful in tracking down who it is (may be more than one even) but here they are, FWIW. It's an interesting virus. Seems to hit people roughly proportionate to their exposure on usenet / the web / IRC / mailing lists. Which is targetting exactly the sort of articulate, outspoken person who would be the most likely to publicise fixes and complain to ISPs... Anyhow, yes, it's quite likely there are several people on these lists who have been infected. Then there are the people who have access to a mail-to-news gateway carrying these lists, of which there are several archived on Google groups. And then there are people who have been hit through KaZaA or IRC or through a shared disk with an infected machine. If any one of those happens to have your e-mail address in a mailbox or similar file then you're going to get hit. See: http://www.sophos.com/virusinfo/analyses/w32gibef.html http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED] (Although Symantec's estimate of the number of infections is laughable) Cheers, Matthew -- Dr Matthew J Seaman MA, D.Phil. 26 The Paddocks Savill Way PGP: http://www.infracaninophile.co.uk/pgpkey Marlow Tel: +44 1628 476614 Bucks., SL7 1TH UK pgp0.pgp Description: PGP signature
