PipeChat Digest #701 - Friday, February 12, 1999
 
Re: not so happy99
  by <douglas@blackiris.com>
Re: not so happy99
  by "Chris Mullen" <nascarfreak1039@hotmail.com>
Re: console lamp
  by "Kevin Cartwright" <kevin1@alaweb.com>
Re: WARNING: DO NOT OPEN MAIL FROM ROBERT EVERSMAN!!!!!!
  by "Nicholas A Hall, Jr." <tremulants@juno.com>
Virus for me?
  by "Kevin Cartwright" <kevin1@alaweb.com>
Re: WARNING: DO NOT...  Info on this "virus":
  by "Nicholas A Hall, Jr." <tremulants@juno.com>
Re: Ecce Sacerdos / Sacerdos et Pontifex
  by <CHERCAPA@aol.com>
Silent movie in Delaware, OH
  by <KriderSM@aol.com>
St. Gregory Hymnal
  by "Bud/burgie" <budchris@earthlink.net>
Liber usualis
  by "Ben Schaffer" <benjamin.schaffer@oberlin.edu>
Happy99 & Robert Eversman, an apology
  by "Ron Yost" <musik@tcsn.net>
Re: html and viruses,
  by <GRSCoLVR@aol.com>
Re: Liber usualis
  by "Bud/burgie" <budchris@earthlink.net>
Organ Dedication Announcement
  by "Tim Bovard" <tmbovard@virtualhosts.net>
Re: Open Console visitations
  by "Chris Mullen" <nascarfreak1039@hotmail.com>
 


(back) Subject: Re: not so happy99 From: douglas@blackiris.com Date: Thu, 11 Feb 1999 21:16:42 -0600   Robert -   Everything looks fine here. No attachments. Hopefully it's the same for everyone else on the list. Since you have followed my instructions, you should be happy99 free now.   Brave souls are invited to reply to make sure all is well now.   Peace!!!   > This is a multi-part message in MIME format. > > ------=_NextPart_000_01BE5602.581A6240 > Content-Type: text/plain; charset=ISO-8859-1 > Content-Transfer-Encoding: 7bit > > This is off topic but important. First off, please know that I would never > send that worm file happy99.exe to my worst enemy and especially not my > friends on this channel. I have followed Doug's list of procedures and I > should be in the clear. Please note that if anything is attached to this > message or one which follows from me, just delete it and don't open the > attachment. Please let me know if anything is still showing up. > > Although never intended, please accept my appologies for the fright this > whole thing may have caused you. > > now back to more important things like 16' vox humana extensions ! > > Most humbly yours, > > Robert Eversman > Mineral Point WI > > ------=_NextPart_000_01BE5602.581A6240 > Content-Type: text/html; charset=ISO-8859-1 > Content-Transfer-Encoding: quoted-printable > > <html><head></head><BODY bgcolor=3D"#FFFFFF"><p><font size=3D2 = > color=3D"#000000" face=3D"Arial">This is off topic but important. First = > off, please know that I would never send that worm file happy99.exe to = > my worst enemy and especially not my friends on this channel. &nbsp;I = > have followed Doug's list of procedures and I should be in the clear. = > Please note that if anything is attached to this message or one which = > follows from me, just delete it and don't open the attachment. Please = > let me know if anything is still showing up.<br><br>Although never = > intended, please accept my appologies for the fright this whole thing = > may have caused you.<br><br>now back to more important things like 16' = > vox humana extensions !<br><br>Most humbly yours,<br><br>Robert = > Eversman<br>Mineral Point WI<br><br></p> </font></body></html> > ------=_NextPart_000_01BE5602.581A6240-- > > > "Pipe Up and Be Heard!" > PipeChat: A discussion List for pipe/digital organs & related topics > HOMEPAGE : http://www.pipechat.org List: mailto:pipechat@pipechat.org > Administration: mailto:admin@pipechat.org Subscribe/Unsubscribe: > mailto:requests@pipechat.org >      
(back) Subject: Re: not so happy99 From: "Chris Mullen" <nascarfreak1039@hotmail.com> Date: Thu, 11 Feb 1999 19:23:02 PST   Nothing was attached to this message.   Chris Mullen           ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com  
(back) Subject: Re: console lamp From: Kevin Cartwright <kevin1@alaweb.com> Date: Thu, 11 Feb 1999 21:26:34 -0600   Robert Eversman wrote:   > P.S. Does anyone know how to turn off the HTML setting in Internet > Explorer so my e mails don't show up twice?   Your mail showed up twice. However, one contained "happy99.exe." Please look into this.   Kevin C. kevin1@alaweb.com    
(back) Subject: Re: WARNING: DO NOT OPEN MAIL FROM ROBERT EVERSMAN!!!!!! From: "Nicholas A Hall, Jr." <tremulants@juno.com> Date: Thu, 11 Feb 1999 20:09:10 -0700   On Thu, 11 Feb 1999 15:29:44 -0500 (EST) cremona84000@webtv.net (bruce cornely) writes:   > >>Do NOT open anything from Mr. Eversman... > >>How might it be recognized when it is >> received? > >You will see the irresistable words: "VIRUS; DO NOT OPEN!"   And why would one not want to open a message like this - other than to waste one's time?   ....Nick   Theatre, Baroque or Cathedral... The pipe organ is God's gift to His children ----- Tremulants@juno.com -----   ___________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com/getjuno.html or call Juno at (800) 654-JUNO [654-5866]  
(back) Subject: Virus for me? From: Kevin Cartwright <kevin1@alaweb.com> Date: Thu, 11 Feb 1999 21:33:38 -0600   Jason D. Comet wrote: > > I just ran a Virus check on my entire computer several times. Good news, > there is no virus. I have all the data that is transfered in and out of > my computer going through a virus checker/cleaner. > > Now, lets get back to organic things that can be cured instead of > virus'.(hehe)   I thought you had to actually download/save happy99.exe anyway, and it wouldn't do anything unless you saw the fireworks (it's secret "wait while setup" screen). Once the mail is recieved, it is in your system, read or unread (unless you use a HotMail or EarthLink accout or something of the such). Please inform me if this post sends the virus. I recieved the recent warning posts after opening the message, but deleted the message before downloading the program attached to it. (It is required to seperately download through a link in an attachment box.)   KRC    
(back) Subject: Re: WARNING: DO NOT... Info on this "virus": From: "Nicholas A Hall, Jr." <tremulants@juno.com> Date: Thu, 11 Feb 1999 20:26:46 -0700   On Thu, 11 Feb 1999 10:35:44 -0800 Ron Yost <musik@tcsn.net> writes:   >Dear Mr. Eversman, > >Your system is infected with the Happy99.exe internet worm and is >sending copies of itself with everything you post!! > >WARNING to listmembers!! Do NOT open anything from Mr. Eversman... >delete it UNREAD!!!! He is probably not sending it on purpose, >but it is attached to his outgoing mail nevertheless!!!! > >Ron Yost, Paso Robles, Calif.   I don't feel there is a problem. From http://www.Europe.DataFellows.com/v-descs/ska.htm comes the following...   NAME: Win32/Ska.A ALIAS: Happy99, WSOCK32.SKA, SKA.EXE, I-Worm.Happy, PE_SKA SIZE: 10000   Win32/Ska.A is a Win32-based e-mail and newsgroup worm. It displays fireworks when executed first time as Happy99.exe. (Normally this file arrives as an e-mail attachment to a particular PC, or it is downloaded from a newsgroup.)   When executed first time, it creates SKA.EXE and SKA.DLL in the system directory. SKA.EXE is a copy of HAPPY99.EXE. SKA.DLL is packed inside SKA.EXE. After this Ska creates a copy of WSOCK32.DLL as WSOCK32.SKA in the system directory. Then it tries to patch WSOCK32.DLL so that its export entries for two functions will point to new routines (to the worm's own functions) inside the patched WSOCK32.DLL. If WSOCK32.DLL is in use, Ska.A modifies the registry's RunOnce entry to execute SKA.EXE during next boot-up. (When executed as SKA.EXE it does not display the firework, just tries to patch WSCOK32.DLL until it is not used.)   "Connect" and "Send" exports are patched in WSOCK32.DLL. Thus the worm is able to see if the local user has any activity on network. When "Connect" or "Send" APIs are called, Ska loads its SKA.DLL containing two exports: "news" and "mail".   Then it spams itself to the same newsgroups or same e-mail addresses where the user was posting or mailing to. It maps SKA.EXE to memory and converts it to uuencoded format and mails an additional e-mail or newsgroup post with the same header information as the original message but containing no text but just an attachment called Happy99.exe.   Therefore Happy99 is not limited like the Win32/Parvo virus which is unable to use a particular news server when the user does not have access to it. The worm also maintains a list of addresses it has posted a copy of itself. This is stored in a file called LISTE.SKA. (The number of entries are limited in this file.)   The worm contains the following encrytped text which is not displayed:   Is it a virus, a worm, a trojan? MOUT-MOUT Hybrid (c) Spanska 1999.   The mail header of the manipulated mails will contain a new field called "X-Spanska: YES". Normally this header field is not visible to receivers of the message.   Since the worm does not check WSOCK32.DLL's attribute, it can not patch it if it is set to read only.   [Analysis: Peter Szor, Data Fellows]   All viruses listed in the Virus description pages can be detected and removed with Data Fellows Anti-virus and Data Security software.   =========================================================   Note that you have to EXECUTE the attachment. As is the case, ASCII-based mail systems cannot have virii attached to a message. The exception to this are virii that appear as macros in some MicroSoft products that are sent via E-Mail.   Here are some useful sites to check on virii, hoaxes, and other things that go bump in the night...   Data Fellows Anti-Virus HOAX warnings page http://www.datafellows.com/vir-info/   Stiller Research Virus Hoax News http://www.stiller.com/hoaxes.htm   SARC - Virus Hoaxes http://www.symantec.com/avcenter/hoax.html   Don't Spread that Hoax! http://www.nonprofit.net/hoax/hoax.html   Hype Alerts! http://www.av.ibm.com/BreakingNews/HypeAlert/   Sophos describes hoaxes and scares http://www.sophos.com/virusinfo/scares/   Hoax Information Sources http://www.nswc.navy.mil/ISSEC/Docs/hoax.html   Virus Hoax Information Center http://darkrose-bds.com/hoax/hoax.htm   Hoax Virus Information http://www-tec.open.ac.uk/virusnews/hoax.html   ISU-Community: E-MAIL VIRUS WAS A HOAX http://web.indstate.edu/acns/hypermail/isucomm9798/1413.html   Do Not "Join The Crew" http://www.udel.edu/topics/virus/hoax.html   AntiVirus Resources, AntiVirus Software, AntiVirus Software http://www.hitchhikers.net/av.shtml   Sensible Security: Canada's Anti-Virus Center http://www.canada-av.com/inframe.htm   Hoax Virus Page http://www.intx.net/rgondek/hoax.htm   Virus Hoax Information http://www.azalea.net/virushoax.html   BotSpot ® : Hoax, Myth, Fraud, Chain Letter and Anti-Spam Site http://www.botspot.com/hoax/   Mac Virus: Home Page http://www.macvirus.com/   Virus Hoax Listing http://www.nai.com/services/support/hoax/hoax.asp   Anti-Virus Software http://www.iwaynet.net/~dsherman/dh17000.htm   Virus Busters http://www.umich.edu/~wwwitd/virus-busters/   ....Nick   Theatre, Baroque or Cathedral... The pipe organ is God's gift to His children ----- Tremulants@juno.com -----   ___________________________________________________________________ You don't need to buy Internet access to use free Internet e-mail. Get completely free e-mail from Juno at http://www.juno.com/getjuno.html or call Juno at (800) 654-JUNO [654-5866]  
(back) Subject: Re: Ecce Sacerdos / Sacerdos et Pontifex From: CHERCAPA@aol.com Date: Thu, 11 Feb 1999 22:23:34 EST   Dear Bud, I don't have a spare St. Gregory's but I might find one for you as my sister-in-law holds down two organist positions in Northern Pa. I'll mention it to her. There must be some stuck somewhere hidden in someones choir room. My snail mail address is 4751 Orchard Rd. Schnecksville, Pa. 18078 You don't know how I appreciate that. Thought I'd never find one. Thank You. PaulP. Valtos  
(back) Subject: Silent movie in Delaware, OH From: KriderSM@aol.com Date: Thu, 11 Feb 1999 22:54:36 EST   Greetings,   The Strand Theatre, a quaint downtown theatre in Delaware, Ohio, is presenting for Valentine's Day celebrants two showings of a silent movie, "The Son of the Sheik" starring Rudolph Valentino.   Tom Hamilton, local silent movie organist, accompanies this film on the theatre's Baldwin Cinema II organ. Hamilton has accompanied several other silent films at the Strand during the past several years as well as in other theatres around the central Ohio area.   Times of the showing are 7 p.m., Saturday, February 13, and 4 p.m., Sunday, February 14, 1999. The Strand Theatre is located on 28 E. Winter St, Delaware, Ohio. Phone # 740/363-4914  
(back) Subject: St. Gregory Hymnal From: Bud/burgie <budchris@earthlink.net> Date: Thu, 11 Feb 1999 20:14:01 -0800   Does anyone have a spare full music edition of the St. Gregory Hymnal they'd be willing to sell and/or trade for a virtually virginal copy of the Episcopal 1940 Hymnal (with Supplement)? I'll take any St. Gregory in reasonable condition, as long as there are no pages missing.   Also, if someone would give me the URL for Pastoral Musicians, I'll post this there too.   THANKS,   Bud        
(back) Subject: Liber usualis From: Ben Schaffer <benjamin.schaffer@oberlin.edu> Date: Thu, 11 Feb 1999 23:21:15 -0500   Where and how can I buy a copy of the Liber usualis?   (Don't mind me, I'm just an Episcopalian!)   Thanks, -Ben Schaffer      
(back) Subject: Happy99 & Robert Eversman, an apology From: Ron Yost <musik@tcsn.net> Date: Thu, 11 Feb 1999 20:13:30 -0800   I wish to apologize to Mr. Eversman for unintentionally implying he would knowingly send a harmful virus to the list. In my haste to warn others this morning I did not choose my wording...especially in the header...very wisely.   I apologize, Mr. Eversman .. and I'm happy you've gotten your system cleaned with no damage to your files. Lord Protect us from hackers!   Ron Yost, Paso Robles, Calif. ~ A victim of a real virus a couple of years back.    
(back) Subject: Re: html and viruses, From: GRSCoLVR@aol.com Date: Fri, 12 Feb 1999 00:10:48 EST   Hi Robert--- I too received 2 copies on the same mail,,but no attachments whatsoever,,,I would like to thank David and others who got the official word out and the professional manner in which it was handled. Thanks, --Roc  
(back) Subject: Re: Liber usualis From: Bud/burgie <budchris@earthlink.net> Date: Thu, 11 Feb 1999 21:38:40 -0800   Hi, Ben!   You can try:   Abbaye Saint-Pierre de Solesmes 72 300 Sable sur Sarthe France   That's all the address you need.   Or try Desclee & Cie, Tournai, Belgium ... I presume they can be found on the Net in an international telephone directory. They used to have a New York office, but I haven't heard anything of it in years.   If there are any RC monasteries, convents or seminaries near you, give them a call. They'd probably be happy to get rid of them, if they haven't already tossed them long since.   Actually, if you're interested in reconciling the chants to the new Kalendarium, the new Graduale Romanum (1974) is more to the point than the Liber, and it IS available from Solesmes. But it only has chants for the Mass, unlike the Liber, which has Vespers for every day and the full Office for major feasts.   Probably all you're going to find in the way of Libers is chant notation with Latin rubrics ... I have a tattered modern notation one with FRENCH rubrics, but that's the only modern notation Liber I've ever seen.   Good luck! I used to have a stack, but I left them at Old St. Mary's in Cincinnati, where they're still in use, as far as I know.   Cheers,   Bud     Ben Schaffer wrote:   > Where and how can I buy a copy of the Liber usualis? > > (Don't mind me, I'm just an Episcopalian!) > > Thanks, > -Ben Schaffer > > "Pipe Up and Be Heard!" > PipeChat: A discussion List for pipe/digital organs & related topics > HOMEPAGE : http://www.pipechat.org > List: mailto:pipechat@pipechat.org > Administration: mailto:admin@pipechat.org > Subscribe/Unsubscribe: mailto:requests@pipechat.org        
(back) Subject: Organ Dedication Announcement From: tmbovard@virtualhosts.net (Tim Bovard) Date: Fri, 12 Feb 1999 00:49:22 -0500   On Sunday, Feb 14, Dr. Huw Lewis will be dedicating the new Nichols and Simpson Organ at Pulaski Heights UMC in Little Rock, AR. There are two recitals - one at 4:00 PM and the other at 7:30 PM. The same program will be done at each recital.   Dr. Lewis' Program is as follows:   Concerto in D Major - Johann Dietrich Druckmuller Suite on the Second Tune - Jean Adam Guilain "Glory be to God on High" , BWV 662 - J.S. Bach Prelude and Fugue in E-flat (St. Anne) - Bach Psalm Prelude, Op32#1 - Herbert Howells Allegro (Sym6) - C.M. Widor   The stoplist for the organ can be found at: http://www.nicholsandsimpson.com/prod05.htm   Tim Bovard    
(back) Subject: Re: Open Console visitations From: "Chris Mullen" <nascarfreak1039@hotmail.com> Date: Mon, 08 Feb 1999 10:52:10 PST   >Chris, >If that organist would have offered to arrange to meet you another time to "play the organ" (however anyone might define this term), would you or your parents have agreed? Perhaps organists whose consoles are so accessible might prepare a form on which such youngsters and their parents could arrange another time to be >introduced properly to the organ. > >To me, open console is so vital to the future of our instrument, that I cannot fathom any organist not trying to fit such visitations into their schedules, busy or not. > >Stan Krider >       Stan,   Absolutely!! At that point I was so interested in just touching the organ that I would have gone over to the church at 2:00 in the morning if that was what it took! I agree, an open console is very important to continuing the "next generation" of organists. I am one of them myself, although I'm in college studying to be a full time music director in the church, I still learn something new about the organ every day. And it is an instrument I love, thanks to Louise Browne and Anne Telschow. God bless 'em!!   Chris Mullen   ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com