some here got the latest outlook worm ..
hi all on this list, someone here got infected by the newest outlook worm. thank god im not using outluck, no dammage happened..... this mail goes to the original sender as well. what about a worm-filter ?? or better, blocking outluck mails ?? its the 30. mail i get now with that worm, and the third time related to a list ...... greets, chris Am Donnerstag, 29. November 2001 13:42 schrieb _servidor@oficinaponti.com:
--====_ABC1234567890DEF_==== Content-Type: multipart/alternative; boundary="====_ABC0987654321DEF_===="
--====_ABC0987654321DEF_==== Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
<HTML><HEAD></HEAD><BODY bgColor=3D#ffffff> <iframe src=3Dcid:EA4DMGBP9p height=3D0 width=3D0> </iframe></BODY></HTML> --====_ABC0987654321DEF_====--
--====_ABC1234567890DEF_==== Content-Type: audio/x-wav; name="YOU_ARE_FAT!.MP3.scr" Content-Transfer-Encoding: base64 Content-ID: <EA4DMGBP9p>
-- visit me: http://mamalala.de - jmax audio related http://video.mamalala.de - jmax video related irc.openprojects.net - channel #jmax
* Christian Klippel (ck@mamalala.de) [011129 05:54]:
someone here got infected by the newest outlook worm. thank god im not using outluck, no dammage happened..... this mail goes to the original sender as well.
I don't know how yet since I'm already removing all attachments except plain/text and pgg stuff. Do you know which message it was? -- -ckm
* Christopher Mahmood (ckm@suse.com) [011130 09:42]:
I don't know how yet since I'm already removing all attachments except plain/text and pgg stuff. Do you know which message it was? pgp
...and we don't have a servidor@suse.de. -- -ckm
* Christopher Mahmood (ckm@suse.com) [011130 09:42]:
I don't know how yet since I'm already removing all attachments except plain/text and pgg stuff. Do you know which message it was?
pgp
...and we don't have a servidor@suse.de. I've got a mail from _servidor@oficinaponti.com (not from the multimedia-e-list) It was titled Re: Re: [suse-multimedia-e] Logiteck Quickcam USB
Am Freitag, 30. November 2001 18:45 schrieb Christopher Mahmood: there was no text, but 2 attachments, one named IMAGES.DOC.pif Maybe the same virus? I had send the first return-mail "Logiteck Quickcam USB" to the list. greetings Helmut
hi christopher, it didnt came from the list, but from one member of the list : servidor@oficinaponti.com the topic-line of his mail was one of this list. so i guess he is a member here. or he got a infected mail from another member of this list, which then .... damn worms....;( greets, chris Am Freitag, 30. November 2001 18:42 schrieb Christopher Mahmood:
* Christian Klippel (ck@mamalala.de) [011129 05:54]:
someone here got infected by the newest outlook worm. thank god im not using outluck, no dammage happened..... this mail goes to the original sender as well.
I don't know how yet since I'm already removing all attachments except plain/text and pgg stuff. Do you know which message it was?
-- visit me: http://mamalala.de - jmax audio related http://video.mamalala.de - jmax video related irc.openprojects.net - channel #jmax
* Christian Klippel (ck@mamalala.de) [011130 10:40]:
it didnt came from the list, but from one member of the list : servidor@oficinaponti.com
the topic-line of his mail was one of this list. so i guess he is a member here. or he got a infected mail from another member of this list, which then ....
damn worms....;(
Ah, yes there's not much I can do about the Cc's. Also, previous to moving this list (and it's German cousin) it was possible to send these sorts of things to the list. You'll be able to tell when an attachment has been removed since the mail will still have a MIME attachment with boundaries and all of the other MIME stuff but the file will be gone. Also, you can look in http://lists.suse.com/archive/suse-multimedia-e/2001-Nov/attachment.html -- -ckm
participants (3)
-
Christian Klippel -
Christopher Mahmood -
Helmut Willems