--------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00003 Date: 04/17/97 From: BOB WEINSTEIN Time: 07:53pm \/To: ROD FEWSTER (Read 2 times) Subj: RIP RF>Clinton Haines, who earned his place in virus-writing history at the RF>age of fifteen as Harry McBungus, became a household name in the RF>virus world by the time he was eighteen as Terminator-Z and TaLoN.... RF> RF>Clinton Haines/Harry McBungus/Terminator-Z/TaLoN died from an RF>overdose of heroin ... on his twenty-first birthday. Sorry to say it, but the signal-to-noise ratio here is only mediocre. But I continue to read it for gems like that one. Kudos sir! May I re-quote you (verbatim, with full attribution; please specify how that should read) in the ILink Virus conference? For the record, I am the Standards Administrator of that echomail network. bob.weinstein@execnet.com --- * SLMR 2.1a #1414 * Teaching a pig to sing wastes your time & annoys the g. --- JMailQWK 2.80/BETA * Origin: Joe Brown's BBS *OS/2* Mt. Vernon, NY - 914 667-9385 (1:2625/111) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00004 Date: 04/11/97 From: RICHARD ST. JOHN Time: 06:06pm \/To: KURT WISMER (Read 2 times) Subj: Internet Dialing Tro -=> Quoting Kurt Wismer to Richard St. John <=- KW> it does work and it was real, however, it was an attack against a KW> specific peice of software... consider the possibility that you don't KW> use that software... Always considered it, but still do not see how you could sit through a dialing pause while the modem dials XXX-XX-XX-XXX-XXXX which is the international code, country code, city code and a number. KW> it's the trojan horse program discussed in this echo not too long ago KW> that changes the number your dialer program dials to an isp in KW> moldavia (i have no idea how to spell the place properly)... it was KW> hidden in a program that the user was told would do something s/he KW> wanted (display some movie format file in realtime over the net, i KW> think) and so the users would install it and bad things would happen KW> with their phone bill afterwards... there are a heap of conditions KW> required for it to work and go unnoticed (like you have to be in zone KW> 1, have an internal modem, be using the right software, etc)... To many conditions, and almost impossible to go unnoticed, even if you don't know about your modem. But I guess some people fell for it. Interesting. RS --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00005 Date: 04/17/97 From: RICHARD ST. JOHN Time: 01:15pm \/To: STEVEN WILLIAMS (Read 2 times) Subj: Windows 3.1 Virus question -=> Quoting Steven Williams to All <=- SW> I seem to remember something about a virus that affects Word SW> documents a while back ago. It causes everything to save as a SW> template? Any info will be much appreciated!! There are dozens of word macro viruses out there. But you are correct, the original concept series saves your file as a template instead of a document file. RS --- GEcho 1.20/Pro * Origin: Slings & Arrows BBS St. Louis, Mo. (1:100/205.0) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00006 Date: 04/16/97 From: RICK COLLINS Time: 11:49pm \/To: TERRY G WRIGHT (Read 2 times) Subj: McAfee CEO -=> Quoting Terry G Wright to All <=- -=> FidoMail to 1:163/215, please.-=< tgw> Can anyone supply me with the name and address of the Chief tgw> Executive Officer of McAfee? They have taken my money and not tgw> provided the service contracted for. I want to make one last tgw> attempt to penetrate the corporate shield-wall. You think you have a legal problem. Contact a competent attorney and find out if you really do. If he's good, he'll even tell you if it's worth your while to proceed. TTFN. Rick. Ottawa, ON 16 Apr 23:51 --- Blue Wave/DOS v2.20 * Origin: BitByters BBS, Rockland ON, Can. (613)446-7773 v34, (1:163/215) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00007 Date: 04/15/97 From: DYLAN SIDES Time: 10:53pm \/To: SCOTT HOFFMAN (Read 2 times) Subj: Hoax virus warnings, Hullo Scott. 11 Apr 97, Scott Hoffman wrote to Paul Walker: SH> uhh. yeah o.k. whatever. I thinks you need to go and explore some SH> software a little more because I can think of a half dozen programs SH> off the top of my head which can externally invoke a program from SH> within e-mail automatically. Name 6 email readers that will execute external files on your drive when you attempt to read a message, or that 'execute' an email message. (__) -=* :::: faze@emarkt.com :::: *=- (__) oo ) -=* y024590dylan@yale.ac.uk *=- ( oo |_/\ -=* www.coming.soon.co.uk *=- /\_| --- * Origin: I'll get me coat. (2:442/621.2600) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00008 Date: 04/14/97 From: PAUL WALKER Time: 07:38pm \/To: KUNO WOUDT (Read 2 times) Subj: Thanks Man Hi Kuno, Kuno Woudt to Paul Walker, 09 Apr 97 21:29. KW> group which do write destructive virusses. And there are kids who KW> take the virus source code or disassembly of an existing KW> non-destructive virus and include a payload themselves. But if the source wasn't available - they wouldn't be able to. And I refuse o believe that the writers aren't aware that "lamers" will take their code and release it, or add something. --- FMail 1.22 * Origin: How can you get rid of a fridge? They love you! - RM 2:442/621.13) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00009 Date: 04/14/97 From: PAUL WALKER Time: 07:40pm \/To: WAYNE CHIRNSIDE (Read 2 times) Subj: ANOTHER WEIRD IDEA... Hi Wayne, Wayne Chirnside to Paul Walker, 08 Apr 97 17:29. WC> interesting tricks engage my interest. i have some C programming and WC> find i could always understand clever coding more easily than more WC> easily than more, 'standard', coding. not getting any positive C != Assembler. In C, you can't jump partway into a routine simply because ts byte sequence, when entered from there, happens to form the code that you want. In assembler, that's just one of the many things you can do. 'tis a whole other kettle of fish. WC> responses on my inquiry's regarding virus souce codes it's certainly WC> not beyond my abilities to find such myself using resources available So do it. --- FMail 1.22 * Origin: The world is a stage and each must play a part. (2:442/621.13) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00010 Date: 04/16/97 From: PAUL WALKER Time: 08:00pm \/To: LUKE PETERSON (Read 2 times) Subj: VIRUSES Hi Luke, Luke Peterson to Mike Simm, 12 Apr 97 12:57. LP> As far as i know, borland turbo pascal versions 6, and 7 will create LP> com files till your hearts content. You need to set up the compiler Turbo Pascal won't, because that's what I use. Borland Pascal might, but they're two different compilers. --- FMail 1.22 * Origin: Blade Runner Blues (2:442/621.13) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00011 Date: 04/16/97 From: PAUL WALKER Time: 08:01pm \/To: SCOTT HOFFMAN (Read 2 times) Subj: Hoax virus warnings, Hi Scott, Scott Hoffman to Paul Walker, 11 Apr 97 22:55. SH> software a little more because I can think of a half dozen programs SH> off the top of my head which can externally invoke a program from SH> within e-mail automatically. Names, please? And when exactly do they run these files? --- FMail 1.22 * Origin: I am the only one, I am the god of kingdom come (2:442/621.13) --------------- FIDO MESSAGE AREA==> TOPIC: 171 VIRUS INFO Ref: E4N00012 Date: 04/17/97 From: DAVID KIRSCHBAUM Time: 03:00pm \/To: ROD FEWSTER (Read 2 times) Subj: RIP > Clinton Haines/Harry McBungus/Terminator-Z/TaLoN died from an > overdose of heroin ... on his twenty-first birthday. Heh heh .. "Too Dumb To Live" --- * Origin: Toad Hall (1:3634/2.4)