Re: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our readers infected?

From: morning_wood (se_cur_ity_at_hotmail.com)
Date: 05/25/03

  • Next message: Mads Tansų: "RE: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our readers infected?" 
    To: "Richard M. Smith" <rms@computerbytesman.com>, <full-disclosure@lists.netsys.com>
Date: Sat, 24 May 2003 17:36:44 -0700

    then my apologies to the the list, the main body of the text is mostly a rip
    of the exe anyway,..

    wood

    ----- Original Message -----
    From: "Richard M. Smith" <rms@computerbytesman.com>
    To: <full-disclosure@lists.netsys.com>
    Sent: Saturday, May 24, 2003 4:33 PM
    Subject: RE: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our
    readers infected?

    > Another option is for the list-serve software to remove all attached
    > executable files from incoming messages it receives before the messages
    > are blasted out to the world. This is a good policy for any email list,
    > but particularly important for a computer security list.
    >
    > FWIW, Outlook 2002 automatically discarded the Update880.exe file on my
    > system, so I couldn't even look at it if I wanted to. A password
    > protected .ZIP file is the generally accepted standard for sending out
    > malware samples. However, I don't think malware is appropriate for this
    > list.
    >
    > Richard
    >
    > -----Original Message-----
    > From: full-disclosure-admin@lists.netsys.com
    > [mailto:full-disclosure-admin@lists.netsys.com] On Behalf Of
    > scheidell@secnap.net
    > Sent: Saturday, May 24, 2003 2:52 PM
    > To: full-disclosure@lists.netsys.com
    > Subject: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our
    > readers infected?
    >
    >
    > so, should being infected with a virus, or attempting to infect others
    > be grounds for automatic unsubscribing?
    >
    > did a google for update880.exe, found nothing yet.
    >
    > TZ eastern.
    >
    > May 24 14:46:15 Solaris postfix/cleanup[1398]: [ID 197553 mail.info]
    > DB90F38111: reject: header Content-Type:
    > application/x-msdownload;??name="Update880.exe" from
    > NETSYS.COM[199.201.233.10];
    > from=<full-disclosure-admin@lists.netsys.com> to=<scheidell@secnap.net>
    > proto=ESMTP helo=<netsys.com>: 550 5.7.2 Possible Virus attachment.
    > email rejected
    >
    >
    > --
    > Michael S. Scheidell, CEO
    > SECNAP Network Security www.secnap.com
    > scheidell@secnap.net / 1+561.368.9561, 1131
    > Sales: 866-SECNAPNET / 866.732.6276
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    > _______________________________________________
    > Full-Disclosure - We believe in it.
    > Charter: http://lists.netsys.com/full-disclosure-charter.html
    >
    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Mads Tansų: "RE: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our readers infected?"

    Relevant Pages