full-disclosure - HEADS UP VIRUS BEING SPREAD one of our readers infected?

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <001501c3224c$e7ad0280$6401a8c0@rms>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: HEADS UP VIRUS BEING SPREAD one of our readers infected?

Another option is for the list-serve software to remove all attached
executable files from incoming messages it receives before the messages
are blasted out to the world.  This is a good policy for any email list,
but particularly important for a computer security list.

FWIW, Outlook 2002 automatically discarded the Update880.exe file on my
system, so I couldn't even look at it if I wanted to.  A password
protected .ZIP file is the generally accepted standard for sending out
malware samples.  However, I don't think malware is appropriate for this
list. 

Richard  

-----Original Message-----
From: full-disclosure-admin@...ts.netsys.com
[mailto:full-disclosure-admin@...ts.netsys.com] On Behalf Of
scheidell@...nap.net
Sent: Saturday, May 24, 2003 2:52 PM
To: full-disclosure@...ts.netsys.com
Subject: [Full-Disclosure] HEADS UP VIRUS BEING SPREAD one of our
readers infected?

so, should being infected with a virus, or attempting to infect others
be grounds for automatic unsubscribing?

did a google for update880.exe, found nothing yet.

TZ eastern.

May 24 14:46:15 Solaris postfix/cleanup[1398]: [ID 197553 mail.info]
DB90F38111: reject: header Content-Type:
application/x-msdownload;??name="Update880.exe" from
NETSYS.COM[199.201.233.10];
from=<full-disclosure-admin@...ts.netsys.com> to=<scheidell@...nap.net>
proto=ESMTP helo=<netsys.com>: 550 5.7.2 Possible Virus attachment.
email rejected

-- 
Michael  S. Scheidell, CEO
SECNAP Network Security www.secnap.com
scheidell@...nap.net  / 1+561.368.9561, 1131
Sales: 866-SECNAPNET / 866.732.6276

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html