[sdiy] Someone on the list may have a virus

[Theo]

Your right,
I just got infected by a mail from henri.kujala at mbnet.fi
subject:
Re: [sdiy] Interesting read on Jürgen 'jomox' Michaelis DIY site
So Henry please check your system.
btw, this virus was sent as a personal reply, not through the list.

Different type of virus/worm though,
the message was empty, and had a .txt attachment of size 0 byte
while the message it self was 40KB.
F*(<!ng HTML mode at work :(

btw, Rick
Is it possible to ban (filter) html post from the list?
As it is now attachments seem to be stripped,
but files included _inside_ the html code are passed on.
Banning HTML altogether would lower the risk of infection
through the list and also keeps pp from sending attachments.

Cheers,
Theo
Not happy while cleaning his system :(



----- Original Message -----
From: Scott Gravenhorst <music.maker at gte.net>
To: <synth-diy at dropmix.xs4all.nl>
Sent: Sunday, December 23, 2001 8:25 AM
Subject: [sdiy] Someone on the list may have a virus


> Please accept my apology in advance:
>
> I received an email with "Re: Re: [sdiy] Linear FM"
> in the subject line, which points to someone on the SDIY
> list (or possibly in the address book of a list member).
> The email contained no plain language text, but had an
> attachment with the very suspicious file name of
> xxxxx.MP3.pif.  xxxxx is not the real name... the file
> was vaporized by my virus/worm software, but it was there
> long enough for me to see the fake MP3 extension.
>
> Recent releases of worms that abuse Outlook (LookOut!)
> by Microsoft attempt to fool the recipient into opening
> the attachment manually by using a common document
> extension (such as MP3) followed by one that triggers
> execution on a DOS/Windows machines.  Unfortunately,
> my virus software nuked the file when I tried to examine it
> for virus contents and I cannot say exactly who it was from,
> except that the first character of the sender's address
> was an underscore.  (The underscore could easily have been
> added by the worm).
>
> It might behoove those of you who use Microsoft Outlook that
> also have 'music.maker at gte.net' in your address book to check
> your system for virus/worm infection.
>
> I apologize profusely for this message, but this is the second
> time this has happened to me and I fear that one of you may have
> an infection that could possibly damage your system.
>
> If it happens again, I will save a copy of it so that perhaps
> I can determine the origin.  The main reason I posted here is
> that the subject line is esoteric enough to point to someone
> here.
>
> May everyone here have great holidays.
>
> =========================================================
> - Government: The other religion.
> - The media's credibility should always be questioned.
> - Lambs who lie down with lions are lunch.
>
> -- Scott Gravenhorst | LegoManiac / Lego Trains / RIS 1.5
> -- Linux Rex         | RedWebMail by RedStarWare
> -- FatMan: home1.GTE.NET/res0658s/TekLab_FatMan_WebSite/index.html
>
>
>