DIYAPASON-L Digest #451 - Sunday, December 2, 2001
 
worm or virus?
  by "Mac Hayes" <mach37@mindspring.com>
Re: [Residence Organs]  worm or virus?
  by <HALTGG@aol.com>
Re: [worm or virus? ]
  by "Mac Hayes" <mach37@mindspring.com>
Re: [worm or virus? ] SirCam32 & Badtrans are both...
  by <TheGluePot@aol.com>
Re: [Residence Organs]  Re: [worm or virus? ]
  by "Jon" <sparky@CEINetworks.com>
 

(back) Subject: worm or virus? From: "Mac Hayes" <mach37@mindspring.com> Date: Sun, 02 Dec 2001 15:50:14 -0800   Hi all-   I just received an email supposedly from Paul Arndt, but it had some characteristics of the worm/virus that has been ravaging the internet over the last few days. The subject line seemed to be valid, but there was no message. Curiously, there was no attachment, either. Could it be my Norton AntiVirus stripped the attachment without notifying me of this action? Paul's return adress had the charateristic underscore charcter prefixed to my email "From:" header. It looked like this:   "Paul Arndt" <_parndt@worldnet.att.net>   I use Netscape, so I have little fear of being contaminated, but I DID expect to find an attachment.   I sent him a query about this message, but the worm may have downed his computer. I'm curious as to whether anyone else on DIYAPASON-L has received a similar message from him?   Mac Hayes  
(back) Subject: Re: [Residence Organs] worm or virus? From: <HALTGG@aol.com> Date: Sun, 2 Dec 2001 18:59:52 EST   Mac, I received the email w/attachment. When I hit the attachment my anti virus seized it and I never saw what it was either. There is a similar situation on the Hammond web a few days ago. Much worse. Anyone without updated anti virus protection is taking a beating. Hal  
(back) Subject: Re: [worm or virus? ] From: "Mac Hayes" <mach37@mindspring.com> Date: Sun, 02 Dec 2001 16:20:31 -0800   Listmembers - thanks for the response. I have received enough replies to confirm that the message supposedly from Paul A. is indeed an infected one. It appears some ISPs - Mindspring and Earthlink at least - do not pass the infected attachments, while AOL does allow them through.   Mac Hayes  
(back) Subject: Re: [worm or virus? ] SirCam32 & Badtrans are both... From: <TheGluePot@aol.com> Date: Sun, 2 Dec 2001 19:55:09 EST   The whole pipe organ community is suffering from this one. It is the Badtrans, SirCam, etc., virus/worm. Many antivirus programs let it = through. The best defense for everyone is DO NOT OPEN any attachment even from = friends that have .scr or .pif or any unknown file designation/extension. These = are ..exe executables that put the infection into your machine. A key is that = the virus will not let you reply to sender because the address is changed to _address@something.com with an underline beginning the correct address. = Get a good antivirus program and run it regularly with updates from the maker = off of the website download. Delete the underline _ in front of the address = and let the owner know his machine is sending out the virus which is a worm. = Go also to your machine and look in the "Recycled" folder for virus copies. Delete anything that looks suspicious like "SirCam32@mm" or clear the = whole folder for safety. Many of the antiviral programs don't know to look for "Recycled" which the virus sets up as a folder to load up with garbage = that slows your system down.   Best wishes to all,   Al Sefl  
(back) Subject: Re: [Residence Organs] Re: [worm or virus? ] From: "Jon" <sparky@CEINetworks.com> Date: Sun, 02 Dec 2001 20:54:15 -0500   I find this wonderfully curious. As a macintosh owner, I am not affected = by these or any other viri.   ~jon   On 12/2/01 7:20 PM, "Mac Hayes" <mach37@mindspring.com> wrote:   > Listmembers - thanks for the response. I have received enough replies > to confirm that the message supposedly from Paul A. is indeed an > infected one. It appears some ISPs - Mindspring and Earthlink at least > - do not pass the infected attachments, while AOL does allow them > through. > > Mac Hayes > > DIYAPASON-L: a Discussion list for owners and builders of their own > Residence Pipe Organs. > HOMEPAGE : http://www.diyapason.pipechat.org > List: mailto:DIYAPASON-L@pipechat.org > Administration: mailto:owner-DIYAPASON@pipechat.org > >