ConfigMaker Beta
I send you this file for your advice. --------------------------------- Do You Yahoo!? Sign-up for Video Highlights of 2002 FIFA World Cup
Anti-viri worked here as well....file captured, and destroyed... backdoor bot indeed... At 20:45 6/17/02 -0700, you wrote:
I send you this file for your advice.
A more incriminating leader, you couldn't of picked... Its nice when things actually WORK right.... What a waste of all our time....like no one here knows about anti-viri protection....like rolling a glazed doughnut into a police station...heh..
Do You Yahoo!? <http://rd.yahoo.com/welcome/*http://fifaworldcup.yahoo.com/fc/en/spl>Sign-up for Video Highlights of 2002 FIFA World Cup --0-340633384-1024371956=:50295 Content-Type: text/plain; name="InterScan_SafeStamp.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_SafeStamp.txt" ****** Message from InterScan E-Mail VirusWall NT ****** ** WARNING! Attached file cisco_configmaker.exe contains: BKDR_SLACKBOT.C virus Attempted to clean the file but it is not cleanable. It has been deleted. ***************** End of message *************** --0-340633384-1024371956=:50295--
[ On Tuesday, June 18, 2002 at 03:17:07 (-0400), blitz wrote: ]
Subject: Viri capture...
Anti-viri worked here as well....file captured, and destroyed... backdoor bot indeed...
Your anti-virus software can only work if you are lame enough to continue to run software that remains vulnerable to known exploits. If you fix your software instead of wasting time and money on an silly virus catcher then maybe you'd also do some preventative maintenance that would block even new and as-yet unknown exploits from occuring. Virus and worm catchers are not vaccines or "wormicides". They're barely equivalent to antibiotics. They only attempt to repair a problem _after_ it raises its ugly head.
<html>
And speaking of vulnerable software.... Please DO NOT EVER send HTML, rich text, or otherwise stylized e-mail, especially not to me or to any public mailing list. Not all mail readers will recognize such formats. HTML in particular is a potential security threat and many firewalls filter it entirely -- especially since CERT and Microsoft recently anounced a very major flaw in the HTML rendering engine used in all Microsoft products. Please send all your messages as plain text only. -- Greg A. Woods +1 416 218-0098; <gwoods@acm.org>; <g.a.woods@ieee.org>; <woods@robohack.ca> Planix, Inc. <woods@planix.com>; VE3TCP; Secrets of the Weird <woods@weird.com>
Are you suggesting us as end users should reprogram every OS and Email client rather than run a virus checker? Because I know I for one dont have time to rewrite them all! And will leave that to their creators safe in the knowledge that my virus checker will stop inbound.. Unfortunately those of us in the real world have users on our networks who are not technically competent and because of choices of software have to use the vulnerable clients and we need virus checkers! Steve On Tue, 18 Jun 2002, Greg A. Woods wrote:
[ On Tuesday, June 18, 2002 at 03:17:07 (-0400), blitz wrote: ]
Subject: Viri capture...
Anti-viri worked here as well....file captured, and destroyed... backdoor bot indeed...
Your anti-virus software can only work if you are lame enough to continue to run software that remains vulnerable to known exploits.
If you fix your software instead of wasting time and money on an silly virus catcher then maybe you'd also do some preventative maintenance that would block even new and as-yet unknown exploits from occuring.
Virus and worm catchers are not vaccines or "wormicides". They're barely equivalent to antibiotics. They only attempt to repair a problem _after_ it raises its ugly head.
<html>
And speaking of vulnerable software....
Please DO NOT EVER send HTML, rich text, or otherwise stylized e-mail, especially not to me or to any public mailing list. Not all mail readers will recognize such formats. HTML in particular is a potential security threat and many firewalls filter it entirely -- especially since CERT and Microsoft recently anounced a very major flaw in the HTML rendering engine used in all Microsoft products. Please send all your messages as plain text only.
[ On Tuesday, June 18, 2002 at 18:30:33 (+0100), Stephen J. Wilcox wrote: ]
Subject: Re: Viri capture...
Are you suggesting us as end users should reprogram every OS and Email client rather than run a virus checker?
Alternatives are not rare, difficult to use, or more limited in any significaant way. Even patches are not lacking, though in this case patching over such fundamental design flaws has proven time and time again to be fallible. -- Greg A. Woods +1 416 218-0098; <gwoods@acm.org>; <g.a.woods@ieee.org>; <woods@robohack.ca> Planix, Inc. <woods@planix.com>; VE3TCP; Secrets of the Weird <woods@weird.com>
participants (4)
-
blitz
-
jim bruer
-
Stephen J. Wilcox
-
woods@weird.com