Correction to my earlier message. A more careful reading of the virus
web site I referenced indicates that the worm can be contracted by
simply viewing the message, without clicking on the attachment, if
you're using certain versions of Internet Explorer. The virus web site
has a link to a Microsoft security alert which has more information. I
encourage anyone who has even viewed either of these messages and who is
using Internet Explorer to carefully read the information on the virus
web site and the Microsoft bulletin.
Roy Lewallen
-------- Original Message --------
Subject: Re: NEC-LIST: great shit, info to see hehe ;-)
Date: Mon, 26 Nov 2001 00:38:49 -0800
From: Roy Lewallen <w7el_at_eznec.com>
Organization: EZNEC Antenna Software
CC: nec-list_at_gweep.ca
References: <E168H06-0005UW-00_at_posix.megawan.net>
Caution: These and messages appear to have been sent by a virus
(technically, a "worm"). Anyone who opened the attachment is likely to
have become infected. See
http://www.symantec.com/avcenter/venc/data/w32.aliz.worm.html for more
information.
Both the messages I received seem to have come from IP address
160.124.60.74, which lists to Olivetti Systems & Networks Africa in
Johannesburg. If anyone knows an NEC-List subscriber who might be using
this service, please notify him that his machine may be sending out
these infested messages.
Roy Lewallen
d.maumau_at_ee.wits.ac.za wrote:
>
> peace
>
> [demime 0.97c removed an attachment of type audio/x-wav which had a name of whatever.exe]
> --
> The NEC-List mailing list <nec-list_at_gweep.ca>
> http://www.gweep.ca/mailman/listinfo.cgi/nec-list
-- The NEC-List mailing list <nec-list_at_gweep.ca> http://www.gweep.ca/mailman/listinfo.cgi/nec-listReceived on Mon Nov 26 2001 - 05:53:29 EST
This archive was generated by hypermail 2.2.0 : Sat Oct 02 2010 - 00:10:41 EDT