[PD] Suspicious files
agillesp at bitshiftaudio.com
Sun Apr 21 21:23:43 CEST 2002
I got bit hard. (Back to Win emacs for e-mail for me!)
Here's the info: W32/Klez.h at MM
It will disable your virus-scanners if it installs itself, so they're
useless. This is a great way to spend a Sunday afternoon.
While I'm definitely blaming myself for getting snagged by this, I wonder if
it my be possible to prohibit attachments from pd-list. Just a thought.
I'm on 28.8k (don't ask) and some of the attachments from this list
sometimes get up to 150k or so. (And sometimes, they're time-sucking
----- Original Message -----
From: "Ben Bogart - FMPM/F1999" <bbogart at acs.ryerson.ca>
To: "João Miguel Pais" <jmmmpl at netcabo.pt>
Cc: "msp" <msp at ucsd.edu>; <pd-list at iem.kug.ac.at>
Sent: Sunday, April 21, 2002 3:28 PM
Subject: Re: [PD] Suspicious files
I got one of these directly to my address this morning. I'm running PINE
under AIX so it was harmless to me. I downloaded the BAT file and it
looked like it was empty... (0 bytes) But I'm certainly not up on the
hacker tricks so I would not say its harmless to everyone.
On Sun, 21 Apr 2002, João Miguel Pais wrote:
> Dear List,
> During the last days automatic-opening-messages composed of an html file
> a .bat file (which is tried to open automatically whenever the message is
> selected) have arrived at me though this list (and of course to the
> and also directly to my address.
> I wanted to ask if these messages are safe, as I suspect them being loaded
> with viruses ready to eat my system (although norton didn't detected
> nothing), since they come from addresses not common to the list, and this
> kind of "abusive" format (which tries to open the files automatically) was
> also not normal so far.
> The last one was today, the data is after this:
> João Miguel Pais
> ----- Original Message -----
> From: "msp" <msp at ucsd.edu>
> To: <pd-list at iem.kug.ac.at>
> Sent: Sunday, April 21, 2002 7:07 AM
> Subject: Re:please try again
More information about the Pd-list