Hi all,
I got bit hard. (Back to Win emacs for e-mail for me!)
Here's the info: W32/Klez.h@MM
http://vil.mcafee.com/dispVirus.asp?virus_k=99455
It will disable your virus-scanners if it installs itself, so they're useless. This is a great way to spend a Sunday afternoon.
While I'm definitely blaming myself for getting snagged by this, I wonder if it my be possible to prohibit attachments from pd-list. Just a thought. I'm on 28.8k (don't ask) and some of the attachments from this list sometimes get up to 150k or so. (And sometimes, they're time-sucking viruses. :-/)
Best,
Art
0xBA
----- Original Message ----- From: "Ben Bogart - FMPM/F1999" bbogart@acs.ryerson.ca To: "João Miguel Pais" jmmmpl@netcabo.pt Cc: "msp" msp@ucsd.edu; pd-list@iem.kug.ac.at Sent: Sunday, April 21, 2002 3:28 PM Subject: Re: [PD] Suspicious files
I got one of these directly to my address this morning. I'm running PINE under AIX so it was harmless to me. I downloaded the BAT file and it looked like it was empty... (0 bytes) But I'm certainly not up on the hacker tricks so I would not say its harmless to everyone.
Ben
On Sun, 21 Apr 2002, João Miguel Pais wrote:
Dear List,
During the last days automatic-opening-messages composed of an html file
and
a .bat file (which is tried to open automatically whenever the message is selected) have arrived at me though this list (and of course to the
others),
and also directly to my address. I wanted to ask if these messages are safe, as I suspect them being loaded with viruses ready to eat my system (although norton didn't detected nothing), since they come from addresses not common to the list, and this kind of "abusive" format (which tries to open the files automatically) was also not normal so far. The last one was today, the data is after this:
João Miguel Pais
----- Original Message ----- From: "msp" msp@ucsd.edu To: pd-list@iem.kug.ac.at Sent: Sunday, April 21, 2002 7:07 AM Subject: Re:please try again