<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>viruses and worms</title></head><body>
<div><font size="+2"><br></font></div>
<div><font size="+2"><i>(This was posted in different forms before on
tml and tmtalk. I apologize for the redundancies, but we need to get
this message out.)</i></font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Dear Siblings:</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">The computer of one or more on our TeaM lists has
apparently been invaded by a "worm" or "virus" and
eMail address of TeaM members were harvested. We have seen many
different messages with different attachments, all have program files
attached ending with the .exe.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">The messages that you are receiving have so far
not been sent to the entire TeaM lists, but are faked as coming from
your sisters and brothers participating in these lists. I receive
about 3 or 4 a day since a few weeks. They are all disguised as coming
from people on our lists. All have program files attached which are
very dangerous when they are run. Some will erase vital system files
on your computer, so that you can not start your machine again without
installing a new system, some will just copy all eMail addresses found
on your computer, etc.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">The situation is exasperated because we are
getting eMails with the return address of our friends. The lists
itself have not received these fake messages to my
knowledge.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">At first I thought that individual computers were
infected, but now it seems that someone from our lists got hit by a
worm and their addresses were harvested and are now being used
endlessly. It is so insidious. The first defense is to make each other
aware by repeating the message so all can receive it.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">If you are bothered by this and you are getting
tired of deleting these messages, here are a couple of
suggestions:</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">If you are working with an eMail client (like
Eudora our Outlook), or if you get your mail web-bound with a browser,
you can create filters that will move the unwanted files with a
certain attachment directly to the Trash or to your Junk folder. You
do not stop the problem, but at least you do not get to see these
posts any longer. Since they have different subject lines, you can not
use that as a criteria. Senders you can't use either, because they are
your friend's address. But you can say, if a file has an attachment
called "demo.exe" take the action of sending such a post to
the Trash or Junk folder.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Another way is to change to another eMail
address. Create a new one -- if you like yours, one letter different
or added will create a unique new one. Then unsubscribe and subscribe,
which can be done in one post for all lists you participate
in.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Leave subject: line empty and send
to:</font></div>
<div><font size="+2"><br></font></div>
<blockquote><font
size="+2">majordomo@circuit1.teamcircuits.com</font></blockquote>
<div><font size="+2"><br></font></div>
<div><font size="+2">In the body say, for example:</font></div>
<div><font size="+2"><br></font></div>
<blockquote><font size="+2">unsubscribe tml
YourOldAddress</font></blockquote>
<blockquote><font size="+2">subscribe tml
YourNewAddress</font></blockquote>
<div><font size="+2"><br></font></div>
<div><font size="+2">The same for tmtalk, tmtranscripts and/or
ubquestions</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">This will stop receiving these posts immediately
-- until, of course, one of us is infiltrated again. However this will
also not stop the problem itself, but it will stop the immediate
danger and nuisance. Only reliable anti-virus software will stop the
problem from occurring again, but only if all have anti-virus software
installed.</font></div>
<div><br></div>
<div><font size="+2"><br></font></div>
<div align="center"><font size="+3" color="#FF0000">THE
"demo.exe" and "SecUNCE.exe " and other .exe
files,</font></div>
<div align="center"><font size="+3" color="#FF0000">CONTAIN A VIRUS or
Worm!</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Furthermore, this is what each TeaM mailing list
participant should do:</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">a) make sure that you have working (activated)
anti-virus software; </font></div>
<div><font size="+2">b) that you keep the virus definition files
up to date (these days they change several times a month. With most
virus programs the updating can be set to automatic.);
and </font></div>
<div><font size="+2">c) do not open attached executable files, unless
you check back with the person who you think sent them.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Macintosh users are not effected by .exe files,
unless they have a Windows emulator installed and actually run these
program files, and even then I doubt that addresses can be harvested
or files deleted as the file names are all different. However, Mac
friends should use anti-virus software, because there are plenty
(hundreds) of viruses out there especially for the Mac
environment.</font></div>
<div><br></div>
<div><font size="+2">We are dealing with sophisticated deceptions
here, and we must learn how to avoid them.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">If you feel I can help you further in setting up
filters, or with your anti-virus software, feel free to contact me
directly.</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">We will get this problem licked...</font></div>
<div><font size="+2"><br></font></div>
<div><font size="+2">Oliver</font></div>
</body>
</html>
***************************************************************************
To post a message to tmtranscripts send email to: tmtranscripts@circuit1.teamcircuits.com
To unsubscribe send to majordomo@circuit1.teamcircuits.com the message:
unsubscribe tmtranscripts
To subscribe send to majordomo@circuit1.teamcircuits.com the message:
subscribe tmtranscripts
Available on the web at: http://www.teamcircuits.com/tmtranscripts