From: Kamilion <kam...@gm...> - 2006-03-28 03:42:13
|
Well, sorry folks, but I'm unsubscribing. Y'all are just sending me far too many viruses. I've counted at least 5 in the past two weeks. If this is rectified soon, I'd appreciate someone letting me know so I can resubscribe= . Keep up the good work on CoLinux. I use it constantly and reccomend it to a lot of people. |
From: Eric S. J. <es...@ha...> - 2006-03-28 03:48:41
|
Kamilion wrote: > Well, sorry folks, but I'm unsubscribing. Y'all are just sending me > far too many viruses. I've counted at least 5 in the past two weeks. > If this is rectified soon, I'd appreciate someone letting me know so I > can resubscribe. > > Keep up the good work on CoLinux. I use it constantly and reccomend it > to a lot of people. in all probability it is not someone sending you the viruses through the list but is instead someone on the list sending you the viruses directly. Let this be a reminder to all that it's probably not a bad idea running a virus/Trojan scan once in a while. |
From: Kamilion <kam...@gm...> - 2006-03-28 04:14:06
|
Doubtful, I could forward you the digest mails containing the virii. And I havn't had a virus since 1995 (damn you, CIH, and the flashbios you overwrote!) I can almost promise it came from the list, as all my mail is filtered and sorted... Here's a little snippet: SNIP FOLLOWS: (possibly in HTML format, I can't tell from this side if it's plaintext or html.) Subject: coLinux-devel digest, Vol 1 #764 - 2 msgs Label: coLinux Mailing list From: col...@li... to colinux-devel =3D20 Date: Mar 20 X-Gmail-Received: e8386f87400946ae9d61339f3fec1732c379fd17 Delivered-To: kam...@gm... Received: by 10.70.123.15 with SMTP id v15cs14087wxc; Mon, 20 Mar 2006 09:50:04 -0800 (PST) Received: by 10.37.20.70 with SMTP id x70mr1758145nzi; Mon, 20 Mar 2006 09:50:03 -0800 (PST) Return-Path: <col...@li...> Received: from lists-outbound.sourceforge.net (lists-outbound.sourceforge.net [66.35.250.225]) by mx.gmail.com with ESMTP id 5si357902nzk.2006.03.20.09.50.02; Mon, 20 Mar 2006 09:50:03 -0800 (PST) Received-SPF: pass (gmail.com: domain of col...@li... designates 66.35.250.225 as permitted sender) Received: from sc8-sf-list1-b.sourceforge.net (sc8-sf-list1-b.sourceforge.net [10.3.1.7]) =3D09by sc8-sf-spam2.sourceforge.net (Postfix) with ESMTP =3D09id E14F712AB2; Mon, 20 Mar 2006 09:50:01 -0800 (PST) Date: Mon, 20 Mar 2006 09:49:04 -0800 From: col...@li... Subject: coLinux-devel digest, Vol 1 #764 - 2 msgs Reply-To: col...@li... X-Mailer: Mailman v2.0.9-sf.net MIME-version: 1.0 Content-type: text/plain To: col...@li... Sender: col...@li... Errors-To: col...@li... X-BeenThere: col...@li... X-Mailman-Version: 2.0.9-sf.net Precedence: bulk List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/colinux-dev= =3D el>, =3D09<mailto:col...@li...?subject=3D3Dunsubs= crib=3D e> List-Id: <colinux-devel.lists.sourceforge.net> List-Post: <mailto:col...@li...> List-Help: <mailto:col...@li...?subject=3D3D= he=3D lp> List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/colinux-devel= =3D >, =3D09<mailto:col...@li...?subject=3D3Dsubscr= ibe> List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum=3D3Dcolin= ux=3D -devel> Message-Id: <200...@sc...> Send coLinux-devel mailing list submissions to col...@li... To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/colinux-devel or, via email, send a message with subject or body 'help' to col...@li... You can reach the person managing the list at col...@li... When replying, please edit your Subject line so it is more specific than "Re: Contents of coLinux-devel digest..." Today's Topics: 1. Re[8]: (Arnold Alton) 2. Re[2]: (Schmitt Wendell) --__--__-- Message: 1 From: "Arnold Alton" <dom...@sk...> To: "Arredondo Alva" <col...@li...> Date: Mon, 20 Mar 2006 12:48:57 +0000 Subject: [coLinux-devel] Re[8]: This is a multi-part message in MIME format. ------=3D3D_NextPart_000_A893 _4BCF0DE1.2567A893 Content-Type: multipart/alternative; boundary=3D3D"----=3D3D_NextPart_001_4BCF_0DE12567.A8934BCF" ------=3D3D_NextPart_001_4BCF_0DE12567.A8934BCF Content-Type: text/plain; charset=3D3D"windows-1252" Content-Transfer-Encoding: quoted-printable beside Praskovya Fyodorovna who instead of a soup-bowl was holding a =3D3D gauze-covered white enamelled dish containing a hypodermic syringe. 'What are you doing? ' said Nikanor Ivanovich bitterly as they =3D3= D gave him an injection. ' I haven't any I tell you! Why doesn't Pushkin hand =3D= 3D over his foreign currency? I haven't got any! ' 'No, of course you haven't,' said kind Praskovya Fyodorovna, ' and = =3D =3D3D no one is going to take you to court, so you can forget it and relax.' After Ms injection Nikanor Ivanovich calmed down and fell =3D3D into a dreamless sleep. His unrest, however, had communicated itself to No. 120 where = =3D =3D3D the patient woke up and began looking for his head; No. 118 where the =3D3D nameless master wrung his hands as he gazed at the moon, remembering that last =3D3D bitter autumn night, the patch of light under the door in his basement and = =3D =3D3D the girl's hair blown loose. The anxiety from No. 118 flew along the balcony to Ivan, who =3D3D woke up and burst into tears. The doctor soon calmed all his distraught patients and they went =3D= 3D back to sleep. Last of all was Ivan, who only dozed off as dawn began to =3D3= D rmoioto topop nf n tsp oror nrotofq s oh ol mimkmgh s m m lpmi mklql rlrljmt lpl qhg mtmjll sdjksdfsdfsdlgkj sdflkjsdf lksdjfsdfsdf ------=3D3D_NextPart_001_4BCF_0DE12567.A8934BCF Content-Type: text/html; charset=3D3D"windows-1252" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3D3D3DContent-Type content=3D3D3D"text/html; =3D3D charset=3D3D3Dwindows-1252"> <META content=3D3D3D"MSHTML 5.00.2919.6600" name=3D3D3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D3D3D#ffffff> =3D3D break over the river. As the sedative spread through his body, =3D3D tranquillity covered him like a slow wave. His body relaxed and his head was filled =3D= 3D with the warm breeze of slumber. As he fell asleep the last thing that he =3D3= D heard was the dawn chorus of birds in the wood. But they were soon silent =3D3= D again and he began dreaming that the sun had already set over Mount Golgotha = =3D =3D3D and that the hill was ringed by a double cordon. ... The sun had already set over Mount Golgotha and the hill was ringed by a double cordon. The cavalry ala that had held up the Procurator that morning had =3D= 3D left the city at a trot by the Hebron Gate, its route cleared ahead of = =3D =3D3D it. Infantrymen of the Cappadocian cohort pressed back a crowd of people, =3D3= D mules and camels, and the ala, throwing up pillars of white dust, trotted =3D3D towards the crossroads where two ways met--one southward to Bethlehem, the =3D3= D other northwestward to Jaffa. The ala took the north-westward route. More of = =3D =3D3D the Cappadocians had been posted along the edge of the road in time to clear = =3D =3D3D the route of all the caravans moving into Jerusalem for Passover. Crowds = =3D =3D3D of nnsr pup s pqp sqgq st qpi psq upupmn rpgp mqr pjphurpfqq pfpjqj=3D20 qsquqk po qqqnufqg n ko k sdjksdfsdfsdlgkj sdflkjsdf lksdjfsdfsdf <DIV><IMG alt=3D3D3D"" hspace=3D3D3D0 =3D3D src=3D3D3D"cid:0be501c64c1c$02850e47$3bb4e677@exkubn"=3D3D20 align=3D3D3Dbaseline border=3D3D3D0></DIV></BODY></HTML> ------=3D3D_NextPart_001_4BCF_0DE12567.A8934BCF-- ------=3D3D_NextPart_000_A893_4BCF0DE1.2567A893 Content-Type: image/jpeg; name=3D3D"0325.jpg" Content-Transfer-Encoding: base64 Content-ID: <0be501c64c1c$02850e47$3bb4e677@exkubn> /9j/4AAQSkZJRgABAQAAAQABAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyBJSkc= =3D g SlBFRyB2NjIpLCBxdWFsaXR5ID0gNTMK/9sAQwAPCgsNCwkPDQwNERAPEhcmGBcVFRcuISMbJjc= =3D w OTg2MDU0PERWSTxAUkE0NUtmTFJZXGFiYTpIanJpXnFWX2Fd/9sAQwEQEREXFBcsGBgsXT41Pl1= =3D d XV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1d/8AAEQgBGwF= =3D / AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAM= =3D F BQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCk= =3D q NDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZq= =3D i o6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/= =3D E --- CUT OFF ------------------- END SNIP I extracted that jpeg file on my linux box and it's definitely not a real picture. Some kind of buffer overflow exploit. Certainly looks like viral material from the list. If it's not from the list, someone is sure trying VERY hard to make me think it is ;) On 3/27/06, Eric S. Johansson <es...@ha...> wrote: > Kamilion wrote: > > > Well, sorry folks, but I'm unsubscribing. Y'all are just sending me > > far too many viruses. I've counted at least 5 in the past two weeks. > > If this is rectified soon, I'd appreciate someone letting me know so I > > can resubscribe. > > > > Keep up the good work on CoLinux. I use it constantly and reccomend it > > to a lot of people. > > in all probability it is not someone sending you the viruses through the > list but is instead someone on the list sending you the viruses > directly. Let this be a reminder to all that it's probably not a bad > idea running a virus/Trojan scan once in a while. |
From: Henry N. <Henry.Ne@Arcor.de> - 2006-03-28 08:49:18
|
Eric S. Johansson wrote: > Kamilion wrote: > >> Well, sorry folks, but I'm unsubscribing. Y'all are just sending me >> far too many viruses. I've counted at least 5 in the past two weeks. >> If this is rectified soon, I'd appreciate someone letting me know so I >> can resubscribe. >> >> Keep up the good work on CoLinux. I use it constantly and reccomend it >> to a lot of people. > > in all probability it is not someone sending you the viruses through the > list but is instead someone on the list sending you the viruses > directly. Let this be a reminder to all that it's probably not a bad > idea running a virus/Trojan scan once in a while. I can only agree with Eric. The list has a size limit, that is not possible for most virus sends :) -- Henry Nestler |
From: David K. <da...@gi...> - 2006-03-28 16:03:45
|
Hi Kamilion, Kamilion <kam...@gm...> wrote: > ....I could forward you the digest mails containing the virii... > I can almost promise it came from the list, as all my mail is filtered > and sorted... > > Here's a little snippet: > > Date: Mon, 20 Mar 2006 09:49:04 -0800 > From: col...@li... > Subject: coLinux-devel digest, Vol 1 #764 - 2 msgs That's odd. I'm not subscribed to the digest-version of the list - I get all the emails individually. But I only got one on March 20th, not two, as you appear to have received in the digest version! Maybe spam, viruses (and, er, HTML emails) are not being filtered from the daily digest version of the mailing list the way they are for normal delivery...? I'd report this as a bug in the mailing list software config to sourceforge.net. In the meantime, it's a fairly low-volume list -- once you filter the spam and virii :-) -- I'd suggest changing your subscription option to the non-digest version for now, at least. This is definitely a (weak) exploit attempt, but I certainly never received a copy of it: > ------=3D_NextPart_000_A893_4BCF0DE1.2567A893 > Content-Type: image/jpeg; > name=3D"0325.jpg" > Content-Transfer-Encoding: base64 > Content-ID: <0be501c64c1c$02850e47$3bb4e677@exkubn> > > /9j/4AAQSkZJRgABAQAAAQABAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyBJSkc=g > SlBFRyB2NjIpLCBxdWFsaXR5ID0gNTMK/9sAQwAPCgsNCwkPDQwNERAPEhcmGBcVFRcuISMbJjc=w > OTg2MDU0PERWSTxAUkE0NUtmTFJZXGFiYTpIanJpXnFWX2Fd/9sAQwEQEREXFBcsGBgsXT41Pl1=d > XV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1d/8AAEQgBGwF=/ > AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwMCBAM=F > BQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSYnKCk=q > NDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpeYmZq=i > o6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j5+v/=E > --- CUT OFF > > ------------------- > > END SNIP > I extracted that jpeg file on my linux box and it's definitely not a > real picture. Some kind of buffer overflow exploit. > > Certainly looks like viral material from the list. > If it's not from the list, someone is sure trying VERY hard to make me > think it is ;) -dave |
From: Kamilion <kam...@gm...> - 2006-03-30 10:50:29
|
Well, at least it has some attention now. That's a start. :) Thanks folks, I'll just adjust my filtering systems instead of unsubscribing, but I'll keep an eye on the situation. -- Kami On 3/28/06, David Kaufman <da...@gi...> wrote: > Hi Kamilion, > > Kamilion <kam...@gm...> wrote: > > ....I could forward you the digest mails containing the virii... > > I can almost promise it came from the list, as all my mail is filtered > > and sorted... > > > > Here's a little snippet: > > > > Date: Mon, 20 Mar 2006 09:49:04 -0800 > > From: col...@li... > > Subject: coLinux-devel digest, Vol 1 #764 - 2 msgs > > That's odd. I'm not subscribed to the digest-version of the list - I > get all the emails individually. But I only got one on March 20th, not > two, as you appear to have received in the digest version! > > Maybe spam, viruses (and, er, HTML emails) are not being filtered from > the daily digest version of the mailing list the way they are for normal > delivery...? I'd report this as a bug in the mailing list software > config to sourceforge.net. > > In the meantime, it's a fairly low-volume list -- once you filter the > spam and virii :-) -- I'd suggest changing your subscription option to > the non-digest version for now, at least. > > This is definitely a (weak) exploit attempt, but I certainly never > received a copy of it: > > > ------=3D3D_NextPart_000_A893_4BCF0DE1.2567A893 > > Content-Type: image/jpeg; > > name=3D3D"0325.jpg" > > Content-Transfer-Encoding: base64 > > Content-ID: <0be501c64c1c$02850e47$3bb4e677@exkubn> > > > > /9j/4AAQSkZJRgABAQAAAQABAAD//gA7Q1JFQVRPUjogZ2QtanBlZyB2MS4wICh1c2luZyB= JSkc=3Dg > > SlBFRyB2NjIpLCBxdWFsaXR5ID0gNTMK/9sAQwAPCgsNCwkPDQwNERAPEhcmGBcVFRcuISM= bJjc=3Dw > > OTg2MDU0PERWSTxAUkE0NUtmTFJZXGFiYTpIanJpXnFWX2Fd/9sAQwEQEREXFBcsGBgsXT4= 1Pl1=3Dd > > XV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1dXV1d/8AAEQg= BGwF=3D/ > > AwEiAAIRAQMRAf/EAB8AAAEFAQEBAQEBAAAAAAAAAAABAgMEBQYHCAkKC//EALUQAAIBAwM= CBAM=3DF > > BQQEAAABfQECAwAEEQUSITFBBhNRYQcicRQygZGhCCNCscEVUtHwJDNicoIJChYXGBkaJSY= nKCk=3Dq > > NDU2Nzg5OkNERUZHSElKU1RVVldYWVpjZGVmZ2hpanN0dXZ3eHl6g4SFhoeIiYqSk5SVlpe= YmZq=3Di > > o6Slpqeoqaqys7S1tre4ubrCw8TFxsfIycrS09TV1tfY2drh4uPk5ebn6Onq8fLz9PX29/j= 5+v/=3DE > > --- CUT OFF > > > > ------------------- > > > > END SNIP > > I extracted that jpeg file on my linux box and it's definitely not a > > real picture. Some kind of buffer overflow exploit. > > > > Certainly looks like viral material from the list. > > If it's not from the list, someone is sure trying VERY hard to make me > > think it is ;) > > -dave > > |