28 Nov
2001
28 Nov
'01
12:54 p.m.
There is a virus / worm going around. Among other things, you can spot it
because it seems to replace the sender in the "Reply To:" with one starting
with an underscore. At least two of them appropriated subjects related
to messages I posted on ClassicCmp -- one referring to the PDP/11-24 power
supply stuff and another relating to TU10's.
Norton AV on my machine caught messages with it on my way in, and said:
is infected with the W32.Badtrans.B@mm virus.
The Symantec page
http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.h…
has information on it.
"The worm writes email addresses to the %System%\Protocol.dll file to
prevent multiple emails to the same person. Additionally, the sender's
email address will have the "_" character prepended to it, to prevent
replying to infected mails to warn the sender (eg user(a)website.com becomes
_user(a)website.com)."
Jay
At 01:16 AM 11/29/2001 +0000, you wrote:
As have I, apparently replying to a message that I just posted. It's now
in the bit bucket...
-tony
---
Jay R. Jaeger The Computer Collection
cube1(a)home.com visit http://members.home.net/thecomputercollection
> it titled
in re: something they previously posted. I guess we have a
second
> reason to be upset with Mr. (or Ms.) Ring:
s/he didn't read at least
one of
our
brilliant email posts.
To top it all, I just got a copy from
John R. Keys Jr. <_jrkeys(a)concentric.net> !!