Re: Blackice behind NAT'ed system

From: Larry W4CSC (spaminator@knology.net)
Date: 05/21/02 

From: spaminator@knology.net (Larry W4CSC)
Date: Tue, 21 May 2002 05:25:39 GMT

On 20 May 2002 18:22:47 -0700, th1nkhowmanydays@hotmail.com (Shortly)
wrote:

>
>
>
>Thanks for your response. Yeah. People on the internal lan like to
>port scan my pc with somethin' called RETINA and NMAP for weaknesses.
>Then I get BSOD. Any suggestions?

No problemo, if you know who the culprits are. Find their ethernet
cable and cut out a 4' section. Gift wrap it and leave it on their
doorstep or hanging across the opening in their cube. Include a copy
of your logs showing their transgressions......(c;
>
>I am running XP Pro. Why is OE so dangerous? (btw, i like the pegasus
>4 application. how is it safer than oe6?)

Tonight, in the last 2 hours, I got 2 automatically sent worm viruses
from two ham radio friends running Outlook Express. They both had an
attached file called DIF.EXE on them. One was marked "WinXP upgrade"
in the Subject line, but not the other. There was only a brief text
from the worm propagator using these guys' Address Book in OE's
registry to send them to all their friends......THAT's what's
dangerous about OE.....runs code automatically to benefit the
spammers......now benefits the crackers, too!

Pegasus 4 is NOT attached to a browser. It does NOT run HTML, or any
code automatically, and you must doubleclick on this DIF.EXE file to
force it to run it. Pegasus uses a different, obscure format address
book the crackers don't target because Pegasus is too obscure to crack
for. Pegasus also doesn't come from the hated Bill Gates or the hated
Micro$not. That alone is comforting....
>
>I thought my antivirus would stop all malicious java scritpings, etc.
>I guess I'll just have to turn everything off, and not enjoy java.

Nope....Embedded code in webpages can run past it. Even tonight, with
TWO infected emails.....Norton AntiVirus, updated yesterday, didn't
alarm on the emaill download AT ALL.....

I'm going for upgrade now....to see if a new definition is about
this....

Larry

Quantcast