Amps
[Top] [All Lists]

[AMPS] about one of the latest v's

To: <amps@contesting.com>
Subject: [AMPS] about one of the latest v's
From: Mike" <W4EF@dellroy.com (Mike)
Date: Sun, 29 Jul 2001 09:34:59 -0700
Be careful, a friend of mine told me recently that SirCam worm for instance 
sends 
a .VBS (visual basic script) file disguised as a .XLS attachment. To make 
matters worse, 
this worm will probably come from somebody you know since it likes to get into 
the 
outlook express address book and mails itself to all the email address's in the 
book. I 
guess there is a way to view the hidden file attributes (the suppressed .vbs 
extension), 
but I am not sure how you do it.

73 de Mike, W4EF..............


----- Original Message ----- 
From: "Jon Ogden" <na9d@speakeasy.net>
To: "Jim Smith" <jimsmith@bigvalley.net>; <amps@contesting.com>
Sent: Sunday, July 29, 2001 5:52 AM
Subject: Re: [AMPS] about one of the latest v's


> 
> on 7/28/01 10:20 AM, Jim Smith at jimsmith@bigvalley.net wrote:
> 
> > Even that doesn't work. I was waiting for someone to send me a file at
> > work. I received the e-mail with an attachment as expected, however I
> > recognized the name of the attachment as a well known w-o-r-m. I used Norton
> > to verify that the file was infected. It had booted out the intended
> > attachment, and put itself in its place.
> > I don't know why Norton didn't catch it on it's own, but we dropped
> > Norton like a hot potato in our office after that.
> 
> The key is to look at the filename extension.  It it's an EXE or a PIF or an
> SCR when you are expecting DOC, XLS, PDF, etc. then you know you have a
> problem.
> 
> 73,
> 
> Jon
> NA9D
> 
> -------------------------------------
> Jon Ogden
> NA9D (ex: KE9NA)
> 
> Member:  ARRL, AMSAT, DXCC, NRA
> 
> http://www.qsl.net/ke9na
> 
> "A life lived in fear is a life half lived."
> 
> 
> --
> FAQ on WWW:               http://www.contesting.com/FAQ/amps
> Submissions:              amps@contesting.com
> Administrative requests:  amps-REQUEST@contesting.com
> Problems:                 owner-amps@contesting.com
> 


--
FAQ on WWW:               http://www.contesting.com/FAQ/amps
Submissions:              amps@contesting.com
Administrative requests:  amps-REQUEST@contesting.com
Problems:                 owner-amps@contesting.com


<Prev in Thread] Current Thread [Next in Thread>