Hi, On Mon, 19 Jun 2000, David Porter wrote:

* David Porter :

...

* John Gowin :

...

...

The male and female stages of life.

I don't want a 52k mass of hubris. Is there some reason why you sent a microsoft specific document/script/virus to a Linux mailing list?

Heh. It just occured to me that your mailer is outlook. (Flame the "technology", not the user...)

I second this. Please do not flame the original author - he might not even know what happened. Bye, LenZ -- ------------------------------------------------------------------ Lenz Grimmer SuSE GmbH mailto:grimmer@suse.de Schanzaeckerstr. 10 http://www.suse.de/~grimmer 90443 Nuernberg, Germany -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

On Mon, 19 Jun 2000, Sean Rima wrote:

Hi Lenz!

On Mon, 19 Jun 2000, Lenz Grimmer wrote:

...

...

...

I don't want a 52k mass of hubris. Is there some reason why you sent a microsoft specific document/script/virus to a Linux mailing list?

Heh. It just occured to me that your mailer is outlook. (Flame the "technology", not the user...)

I second this. Please do not flame the original author - he might not even know what happened.

Of course his misfortune may aid others in stopping this spreading. I have warned all my family and friends.

I just got a note from CERT about a new Microsoft security problem. Problem is the fix issued by microsoft doesn't fix the problem. The new problem? Seems the help files from IE can now be used to write viruii[viruses?]. Quoted from the CERT note "The Microsoft Windows HTML help facility (part of Internet Explorer) is able to execute arbitrary programs through an embedded "shortcut" in a compiled HTML file. This allows the help system to start wizards and other programs as part of the help facility. Unfortunately, it also makes it unsafe for users to open help files obtained from untrusted sources" Now help files are an issue. Nick -- Nick Zentena "The Linux issue," Wladawsky-Berger explained, "is whether this is a fundamentally disruptive technology, like the microprocessor and the Internet? We're betting that it is." -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

No offense to all of those who clicked it, but keeping your system virus free isn't merely a responsiblity that should be laid on software companies. I agree Microsoft has some holes in Outlook, but with smart handling of attachments, disabling auto-running of scripts, and other simple jobs - your system will stay virus free. When computers where newer, no one would ever blame the manufacture for such problems, and while this is on a much larger scale, you should still remember that it's your job to operate the computer responsibly. Just my $0.02 cents, which can be traded in for .5 bars of gold pressed latnum. -Tim ----------------------------------------------------------------- Timothy R. Butler Universal Networks Information Tech. Consultant Christian Web Services Since 1996 ICQ #12495932 AIM: Uninettm An Authorized IPSwitch Reseller tbutler@uninetsolutions.com http://www.uninetsolutions.com ===================== "Solutions that Work" =====================

-----Original Message----- From: Rogier Maas [mailto:icarus@guldennet.nl] Sent: Monday, June 19, 2000 5:10 PM To: zentena@hophead.dyndns.org Cc: Sean Rima; SuSE Linux Subject: Re: [SLE] Re: Jokes

Nick Zentena wrote:

...

On Mon, 19 Jun 2000, Sean Rima wrote:

...

Hi Lenz!

On Mon, 19 Jun 2000, Lenz Grimmer wrote:

...

...

...

I don't want a 52k mass of hubris. Is there some reason

why you sent a

...

...

...

...

...

microsoft specific document/script/virus to a Linux mailing list?

Heh. It just occured to me that your mailer is outlook. (Flame the "technology", not the user...)

I second this. Please do not flame the original author - he might not even know what happened.

Of course his misfortune may aid others in stopping this spreading. I have warned all my family and friends.

I just got a note from CERT about a new Microsoft security problem. Problem is the fix issued by microsoft doesn't fix the problem. The new problem? Seems the help files from IE can now be used to write viruii[viruses?].

Quoted from the CERT note

"The Microsoft Windows HTML help facility (part of Internet Explorer) is able to execute arbitrary programs through an embedded "shortcut" in a compiled HTML file. This allows the help system to start wizards and other programs as part of the help facility. Unfortunately, it also makes it unsafe for users to open help files obtained from untrusted sources"

Now help files are an issue.

Nick

Well, now I know wht my windoze got cray on me. :/ It tried to install OutLook 2k right after I clicked the attachment! Virus-activation?

BahahahahaaaaD....

Was it his intention to send the doc? Is this the new I love you-virus-clone? Probably was. The I LOVE YOU-virus works in the same manner: attaching a would-be textfile (.TXT) which shows a textfile while executing something else. The user doesn't know, because (s)he's laughing his/her head off! (it was a funny text) Since many users hide their file-extentions, the file looks like: file.txt instead of file.txt.shs

Boy.. Another confirmation: I *DO* hate micro$oft, windoze and all things/strings attached to it.

Rogier

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com

Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

I have to agree with Timothy here. I've got prompts for scripts set, but even so, didn't open the attachment because although, like you I couldn't at first see the extension, the Icon depicting the file type wasn't one I recognised. To make sure I could see the filename in full I attempted to save the file to disk. When the file save dialogue window popped up, *then* it was possible to see the full .txt.shs extension. Although I didn't know what it was at that point, my suspicions were doing overtime, so I just deleted it without doing anything more. John -----Original Message----- From: Bill Moseley [mailto:moseley@hank.org] Sent: 20 June 2000 15:07 To: SuSE Mailing List Subject: RE: [SLE] Re: Jokes At 06:09 PM 06/19/00 -0500, Timothy R. Butler wrote:

No offense to all of those who clicked it, but keeping your system virus free isn't merely a responsiblity that should be laid on software companies. I agree Microsoft has some holes in Outlook, but with smart handling of attachments, disabling auto-running of scripts, and other simple jobs - your system will stay virus free.

Well, even the best efforts to protect yourself can be blocked by a bad OS: I have my Win 98 machine set to display file extensions (the default is to NOT display registered file types). Yet this file type (.shs) is hidden anyway, showing the file in Explorer as a simply a .txt file. Bill Moseley mailto:moseley@hank.org -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/ -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

At 02:11 PM 06/25/00 -0500, Timothy R. Butler wrote:

Bill, Are you sure you are not infected? I believe the only reason (other than telling Windows) that would cause that to disappear is the virus itself. I'm pretty sure I can see shs files.

Hi, http://www.cert.org/current/current_activity.html "It is important to note that, by default, Windows operating systems are configured to hide the ".SHS" file extension from the user." Bill Moseley mailto:moseley@hank.org -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

* Timothy R. Butler :

Bill, Are you sure you are not infected? I believe the only reason (other than telling Windows) that would cause that to disappear is the virus itself. I'm pretty sure I can see shs files.

According to http://www.cert.org/current/current_activity.html#virus it some extensions are hidden whether the user explicitly requests that extensions are hidden or not (3rd paragraph): "...a registry key named "NeverShowExt" ... is associated with certain file types, including ".SHS" in the Windows registry. This registry key causes Windows to hide file extensions such as ".SHS" regardless of other user configuration choices. So, the file "life_stages.txt.shs" may appear to be named "life_stages.txt"." Microsoft doesn't make my decisions for me, david. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

Greg Thomas wrote:

Same here. That is such a lame default I can't believe they implemented it. If I want to see file extensions, I want to see them all.

Greg

Aha! But you are not thinking like a good little "gpl" (general public luser)! M$ has decided that seeing all those funny little extensions will confuse you, so in good, caring, Big-Brother style, they just put them out of sight for you. Besides, how can they convince people that DOS is dead, if people keep seeing those pesky extensions? -- This Email is 100% Virus Free! How do I know? Because no Microsoft products were used to generate it! Regards Don Hansford ECKYTECH COMPUTING SuSE Linux 6.4 -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

Rocky McGaugh wrote:

Can we politely flame his network administrator? This *IS* obviously someone's fault.

I'm only 1/2 serious, but something still "enables" these things to happen. In a commercial environment, the only way these things can spread is by neglect of the person responsible for the network.

This raises an interesting point. Is there some way to counteract these type of worms (that replicate themselves via your email address book)? Possibly a script to detect sudden increases in mail activity from a user who doesn't normally send bulk emails? Or maybe something to deny users sending more than a certain number of mails in a hit, without being members of a "bulkmail" group? Just a few braindrops :-) AFAIK, the biggest spread of these worms is via corporate sites, where some people have address books numbering in the hundreds. -- Regards Don Hansford ECKYTECH COMPUTING Surfing the Net (without crashing) With SuSE 6.4 Linux (Thanx Linus!) "Microsoft democratised the computer market and served as a catalyst in making computers available to everybody. Later, however, they did as many revolutionaries do -- they became dictators. History has taught us the inevitable fate of dictators." -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/

David Porter wrote:

* John Gowin :

...

...

The male and female stages of life.

I don't want a 52k mass of hubris. Is there some reason why you sent a microsoft specific document/script/virus to a Linux mailing list?

I'm sure he didn't do it deliberately. In fact, he's probably mortified at the havoc wreaked under his name. Let's hope that his Linux partition didn't get trashed along with his Windows partition. A side comment: there's no way I can see that comes within ten miles of making that file executable under Linux. And if it were transcribed somehow to a shell script, running that script still wouldn't do much if any harm outside of the home directory tree of the person running it. Paul Abrahams -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/Support/Doku/FAQ/