[meteorite-list] WARNING VIRUS ALERT - more info

Mail actions: [ respond to this message ] [ mail a new topic ]
Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

From: Michael Farmer <farmerm_at_meteoritecentral.com>
Date: Thu Apr 22 10:04:49 2004
Message-ID: <004101c1fc38$2dbe5120$39d00140_at_computer>

This is a multi-part message in MIME format.

------=_NextPart_000_003B_01C1FBFD.7FCCA420
Content-Type: multipart/alternative;
        boundary="----=_NextPart_001_003C_01C1FBFD.7FCCA420"

------=_NextPart_001_003C_01C1FBFD.7FCCA420
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Yes, I am being inundated with them, I just updated Norton last night =
and it stops them, but we all need to be carefull.=20
Mike Farmer
  ----- Original Message -----=20
  From: John Gwilliam=20
  To: Meteorite1.net=20
  Cc: meteorite-list_at_meteoritecentral.com=20
  Sent: Wednesday, May 15, 2002 8:46 AM
  Subject: Re: [meteorite-list] WARNING VIRUS ALERT - more info

  Morning Jim and list,
  I know it is list policy to not send info about viruses, but this is a =
very sneaky virus that you need to be warned about. I received four =
different copies of it with different subject titles. Norton anti-virus =
(updated 5/6/02) didn't detect one of them. The attachment was named =
<<<<warn.txt>>>>. I even scanned it in Windows explorer and Norton said =
it was clean. Later in the day, I received a 4th copy of it that Norton =
did catch on the way in.

  Following are the four different subject lines in came under:

  Worm Klez.E immunity
  Rights Reserved
  A very new game
  Tickets

  It has the ability to put whatever address it wants in the "From" line =
while the original infected email address is listed as "Sender".

  I use Eudora Pro.

  Don't open or preview ANY attachments and update your anti-virus =
program every few days for a while.

  Best,

  John Gwilliam

  At 02:19 AM 5/15/04 -0700, you wrote:

    Hello All,
    =20
        After becoming infected 2 days ago from a list member & losing 6 =
months of e-mails & other assorted data now I have received the same =
virus from the following address =
mailto:meteorite-list_at_meteoritecentral.com=20
    =20
    Below is the name of the virus & the name of the file. The strange =
thing is that I received it from the list address on an e-mail address =
that has never been used on the list.
    =20
    Jim
    James Hartman
    =20
    =20
    Date: 5/13/04, Time: 22:28:58,=20
    Virus scanning completed.
    Items scanned: C:-D:=20
    Date: 5/14/04, Time: 8:12:54,=20
    Virus scanning completed.
    Items scanned: C:-D:=20
    Date: 5/15/04, Time: 2:01:24,=20
    The file
    C:\WINDOWS\SYSTEM\Winkpj.exe
    is infected with the W32.Klez.H_at_mm virus.
    Unable to repair this file.
    Date: 5/15/04, Time: 2:01:32,=20
    The file
    C:\WINDOWS\SYSTEM\Winkpj.exe
    was infected with the W32.Klez.H_at_mm virus.
    The file was quarantined.
    ____________________________________________________
      IncrediMail - Email has finally evolved - Click Here=20

-------------------------------------------------------------------------=
-----

  John Gwilliam Meteorites
  PO Box 26854
  Tempe AZ 85285
  http://www.meteoriteimpact.com

------=_NextPart_001_003C_01C1FBFD.7FCCA420
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 5.50.4134.600" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>Yes, I am being inundated with them, I =
just updated=20
Norton last night and it stops them, but we all need to be carefull.=20
</FONT></DIV>
<DIV><FONT face=3DArial size=3D2>Mike Farmer</FONT></DIV>
<BLOCKQUOTE=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV=20
  style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black"><B>From:</B>=20
  <A title=3Djkg_at_theriver.com href=3D"mailto:jkg@theriver.com">John =
Gwilliam</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>To:</B> <A =
title=3Dthemeteoritesite_at_hotmail.com=20
  href=3D"mailto:themeteoritesite_at_hotmail.com">Meteorite1.net</A> </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Cc:</B> <A=20
  title=3Dmeteorite-list_at_meteoritecentral.com=20
  =
href=3D"mailto:meteorite-list_at_meteoritecentral.com">meteorite-list@meteor=
itecentral.com</A>=20
  </DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Sent:</B> Wednesday, May 15, 2002 =
8:46=20
  AM</DIV>
  <DIV style=3D"FONT: 10pt arial"><B>Subject:</B> Re: [meteorite-list] =
WARNING=20
  VIRUS ALERT - more info</DIV>
  <DIV><BR></DIV>Morning Jim and list,<BR>I know it is list policy to =
not send=20
  info about viruses, but this is a very sneaky virus that you need to =
be warned=20
  about.  I received four different copies of it with different =
subject=20
  titles. Norton anti-virus (updated 5/6/02) didn't detect one of =
them. =20
  The attachment was named =
<<<<warn.txt>>>>.  I=20
  even scanned it in Windows explorer and Norton said it was =
clean.  Later=20
  in the day, I received a 4th copy of it that Norton did catch on the =
way=20
  in.<BR><BR>Following are the four different subject lines in came=20
  under:<BR><BR>Worm Klez.E immunity<BR>Rights Reserved<BR>A very new=20
  game<BR>Tickets<BR><BR>It has the ability to put whatever address it =
wants in=20
  the "From" line while the original infected email address is listed as =

  "Sender".<BR><BR>I use Eudora Pro.<BR><BR>Don't open or preview ANY=20
  attachments and update your anti-virus program every few days for a=20
  while.<BR><BR>Best,<BR><BR>John Gwilliam<BR><BR><BR>At 02:19 AM =
5/15/04 -0700,=20
  you wrote:<BR>
  <BLOCKQUOTE cite type=3D"cite">Hello =
All,<BR> <BR>   =20
    After becoming infected 2 days ago from a list member & losing 6 =
months=20
    of e-mails & other assorted data now I have received the same =
virus from=20
    the following address <A=20
    =
href=3D"mailto:meteorite-list_at_meteoritecentral.com">mailto:meteorite-list=
_at_meteoritecentral.com=20
    </A><BR> <BR>Below is the name of the virus & the name of =
the file.=20
    The strange thing is that I received it from the list address on an =
e-mail=20
    address that has never been used on the =
list.<BR> <BR>Jim<BR>James=20
    Hartman<BR> <BR> <BR>Date: 5/13/04, Time: 22:28:58, =
<BR>Virus=20
    scanning completed.<BR>Items scanned:  C:-D: <BR>Date: 5/14/04, =
Time:=20
    8:12:54, <BR>Virus scanning completed.<BR>Items scanned:  C:-D: =

    <BR>Date: 5/15/04, Time: 2:01:24, <BR>The=20
    file<BR>C:\WINDOWS\SYSTEM\Winkpj.exe<BR>is infected with the =
W32.Klez.H_at_mm=20
    virus.<BR>Unable to repair this file.<BR>Date: 5/15/04, Time: =
2:01:32,=20
    <BR>The file<BR>C:\WINDOWS\SYSTEM\Winkpj.exe<BR>was infected with =
the=20
    W32.Klez.H_at_mm virus.<BR>The file was quarantined.<BR><FONT=20
    =
size=3D2>____________________________________________________<BR></FONT><=
A=20
    =
href=3D"http://www.incredimail.com/redir.asp?ad_id=3D309&lang=3D9"><I=
MG=20
    height=3D15 alt=3D"[meteorite-list] WARNING VIRUS"=20
    src=3D"cid:003a01c1fc38$2c09ea60$39d00140_at_computer" =
width=3D20></A><FONT=20
    face=3D"Comic Sans MS" size=3D2>  <I>IncrediMail</I> - <B>Email =
has finally=20
    evolved</B> - </FONT><A=20
    =
href=3D"http://www.incredimail.com/redir.asp?ad_id=3D309&lang=3D9"><F=
ONT=20
    face=3D"Times New Roman, Times"><B><U>Click Here</A></FONT></B></U>=20
</BLOCKQUOTE>
  <P>
  <HR>

  <P></P>John Gwilliam Meteorites<BR>PO Box 26854<BR>Tempe  =
AZ =20
  85285<BR>http://www.meteoriteimpact.com</BLOCKQUOTE></BODY></HTML>

------=_NextPart_001_003C_01C1FBFD.7FCCA420--

------=_NextPart_000_003B_01C1FBFD.7FCCA420
Content-Type: application/octet-stream;
        name="[meteorite-list] WARNING VIRUS "
Content-Transfer-Encoding: base64
Content-ID: <003a01c1fc38$2c09ea60$39d00140_at_computer>
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------=_NextPart_000_003B_01C1FBFD.7FCCA420--
Received on Wed 15 May 2002 01:44:33 PM PDT

This message: [ Message body ]
Next message: Michael Farmer: "[meteorite-list] WARNING VIRUS ALERT"
Previous message: Ron Baalke: "[meteorite-list] New Mars Meteorites Reunited After Long Split"
In reply to: John Gwilliam: "[meteorite-list] WARNING VIRUS ALERT - more info"

Mail actions: [ respond to this message ] [ mail a new topic ]
Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

StumbleUpon

del.icio.us

Yahoo MyWeb