AnsweredAssumed Answered

vrf another VIRUS-attack

Question asked by hansolofalcon on Mar 2, 2004
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><html><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1"><meta name=Generator content="Microsoft Word 10 (filtered)"><style><!-- /* Font Definitions */ @font-face     {font-family:Tahoma;     panose-1:2 11 6 4 3 5 4 4 2 4;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal     {margin:0in;     margin-bottom:.0001pt;     font-size:12.0pt;     font-family:"Times New Roman";}a:link, span.MsoHyperlink     {color:blue;     text-decoration:underline;}a:visited, span.MsoHyperlinkFollowed     {color:purple;     text-decoration:underline;}p     {margin-right:0in;     margin-left:0in;     font-size:12.0pt;     font-family:"Times New Roman";}span.EmailStyle18     {font-family:"Times New Roman";     color:windowtext;     font-weight:normal;     font-style:normal;     text-decoration:none none;}@page Section1     {size:8.5in 11.0in;     margin:1.0in 1.25in 1.0in 1.25in;}div.Section1     {page:Section1;}--></style></head><body bgcolor=white lang=EN-US link=blue vlink=purple><div class=Section1><p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:14.0pt'>Hello from </span></font><font size=4><span style='font-size:14.0pt'>Gregg</span></font><font size=4><span style='font-size:14.0pt'> </span></font><font size=4><span  style='font-size:14.0pt'>C</span></font><font size=4><span style='font-size: 14.0pt'> </span></font><font size=4><span style='font-size:14.0pt'>Levine</span></font></p><p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size: 14.0pt'>Scott</span></font><font size=4><span style='font-size:14.0pt'>, all Iam seeing are the messages from our correspondents, who are mentioning theviruses. So far nothing here. But I’ll instruct my staff to keep theirsystems updated.</span></font></p><div><p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:14.0pt'>-------------------
</span></font><font size=4><span style='font-size:14.0pt'>Gregg</span></font><font size=4><span style='font-size:14.0pt'> </span></font><font size=4><span  style='font-size:14.0pt'>C</span></font><font size=4><span style='font-size: 14.0pt'> </span></font><font size=4><span style='font-size:14.0pt'>Levine</span></font><fontsize=4><span style='font-size:14.0pt'> hansolofalcon@worldnet.att.net
------------------------------------------------------------
"The Force will be with you...Always." Obi-Wan Ke</span></font><font size=4><span style='font-size:14.0pt'>nob</span></font><font size=4><spanstyle='font-size:14.0pt'>i
"Use the Force, </span></font><font size=4><span style='font-size:14.0pt'>Luke</span></font><fontsize=4><span style='font-size:14.0pt'>."  Obi-Wan Ke</span></font><font size=4><span style='font-size:14.0pt'>nob</span></font><font size=4><spanstyle='font-size:14.0pt'>i
(This company dedicates this E-Mail to </span></font><font size=4><span style='font-size:14.0pt'>General </span></font><font size=4><span  style='font-size:14.0pt'>Obi-Wan</span></font><font size=4><span style='font-size:14.0pt'> </span></font><font size=4><span style='font-size:  14.0pt'>Ke</span></font><font size=4><span style='font-size:14.0pt'>nob</span></font><font  size=4><span style='font-size:14.0pt'>i</span></font><font size=4><spanstyle='font-size:14.0pt'> )
(This company dedicates this E-Mail to </span></font><font size=4><span  style='font-size:14.0pt'>Master</span></font><font size=4><span style='font-size:14.0pt'> </span></font><font size=4><span style='font-size:  14.0pt'>Yoda</span></font><font size=4><span style='font-size:14.0pt'> )

</span></font></p></div><div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'><p class=MsoNormal><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>-----Original Message-----
<b><span style='font-weight:bold'>From:</span></b> </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>BAYES</span></font><fontsize=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>,</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>SCOTT</span></font><fontsize=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>(A-Loveland,</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt; font-family:Tahoma'>ex1</span></font><font size=2 face=Tahoma><spanstyle='font-size:10.0pt;font-family:Tahoma'>) [mailto:</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>scott_bayes@agilent.com</span></font><fontsize=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>]
<b><span style='font-weight:bold'>Sent:</span></b> </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>Wednesday, March 03, 2004</span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>2:25 PM</span></font><font size=2face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
<b><span style='font-weight:bold'>To:</span></b> </span></font><font size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>VRF</span></font><fontsize=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'>
<b><span style='font-weight:bold'>Subject:</span></b> [vrf] Re: anotherVIRUS-attack
<b><span style='font-weight:bold'>Importance:</span></b> High</span></font></p><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>Hello vrf-ers,</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>We've investigated this virus/spamproblem, and are pretty confident the vrf list server (Lyris) is not generatingor distributing the bad emails. Lyris puts a 1MB limit on the email size, andthese bad messages are well over the limit.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>Our IT folks believe that one or multiplevrf member computers may be infected, and are probably sending the bad messagesto the vrf as well as to anyone else in the member's address book. The vrfserver rejects these because of the 1MB limit and bounces them back toyou. The big messages you are seeing from Lyris are probably these"bounces", intended to tell you your message was rejected becauseit's too big. The details of the message should confirm this.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>Note that if your computer is infected, itmay be sending bad stuff to other email addresses that are not as well defendedas the vrf server.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>There's not a lot we can do from theAgilent end to solve this, because it's individual member computers that appearto be sending the messages and vrf is refusing to distribute them.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>IT did have some advice:</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>- if you have an IT or networkingdepartment, talk to them about the problem and make sure they have adequatedefences at the "firewall" (most corporate networks hide behind afirewall. The firewall's primary purpose is to restrict potentially dangerousincoming and outgoing traffic to prevent attacks on your network)</span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'> </span></font></p></div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>- again with IT help if you have it,update your virus checker with the latest virus definitions and run it toeradicate the virus (you do have a virus checker, don't you?)</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>- if your virus checker doesn't have newdefinitions to counter this attack, consider switching to a checker that ismore timely in its updates. One of the IT guys suggested that Trendmicro'sPC-cillin seems to be pretty aggressive about keeping up-to-date with viruses.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>To help the vrf and other colleagues,please check as soon as you possibly can to make sure you're not infected withany viruses or other evil programs.</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=2 color=blue face=Arial><span style='font-size:10.0pt;font-family:Arial;color:blue'>Best Regards,</span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><div><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'> </span></font></p></div><p><font size=2 face="Times New Roman"><span style='font-size:10.0pt'>ScottBayes
Software Technical Support

Agilent Technologies, Inc.
815 14th Street S.W.
Loveland, CO, U.S.A. 80537

970 679 3799 Tel
970 635 6867 Fax</span></font></p><p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:12.0pt'>---
You are currently subscribed to vrf as: hansolofalcon@worldnet.att.net
To subscribe send a blank email to"join-vrf@it.lists.it.agilent.com".
To unsubscribe send a blank email to"leave-vrf@it.lists.it.agilent.com".
To send messages to this mailing list, email "vrf@agilent.com".
If you need help with the mailing list send a message to"owner-vrf@it.lists.it.agilent.com". </span></font></p></div></div>---<BR>You are currently subscribed to vrf as: rsb@soco.agilent.com<BR>To subscribe send a blank email to "join-vrf@it.lists.it.agilent.com".<BR>To unsubscribe send a blank email to "leave-vrf@it.lists.it.agilent.com".<BR>To send messages to this mailing list,  email "vrf@agilent.com".  <BR>If you need help with the mailing list send a message to "owner-vrf@it.lists.it.agilent.com".</BODY></html>  

Outcomes