Re: virus? hoax?

[Pete Hall <pbhall@xxxxxxxxxxxxx>]

Yeah. I just looked at my firewall report. I'm getting (really) thousands 
of failed hits/day on port 1214, which makes sense for something that's 
distributed through Kazaa. According to the document on McAfee, if you're a 
Kazaa user, try to run regedit. If you can do that, you probably don't have 
the disease. The Outlook (again) distribution is, lets hope, a secondary 
method of propagation. The background noise on the net is getting a little 
loud lately. Increase it another order of magnitude or two, and the net 
will grind to a halt. Most of the problem can be attributed directly to 
Outlook.

At 23:55 9/19/2003, you wrote:
> Its a virus....
>
> W32/Swen@mm
>
> Go to your anti virus site for info...
>
> Ed
>
> ----- Original Message -----
> From: "Pete Hall" <pbhall@xxxxxxxxxxxxx>
> To: "Midrange Systems Technical Discussion" <midrange-l@xxxxxxxxxxxx>
> Sent: Friday, September 19, 2003 8:34 PM
> Subject: Re: virus? hoax?
>
>
> > I don't believe they're coming through the list. I haven't seen any of
> them.
> >
> > At 10:33 9/19/2003, Fran Dennoncourt wrote:
> > >Hello,
> > >I got a strange e-mail yesterday and three this morning. Forwarded all
> > >to our help desk who asked what kind of mailing lists I subscribed to.
> > >Just this, the RPG list,  and ClubTechiSeries. Fortunately, all e-mail
> > >with attachments having specific extensions are blocked. One attachment
> > >was 'deletedo.txt', I think.
> > >The subjects are 'last net critical patch', 'Internet Security Patch',
> > >'Returned Message: User unknown', and 'Current Network Upgrade'. The
> > >sender addresses all have MS Corp or MicroSoft in it in some form.
> > >Anyone else getting these?
> > >Thanks.
> >
> > Pete Hall
> > pbhall@xxxxxxxxxxxxx
> > http://www.pbhall.us/
> >
> > _______________________________________________
> > This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
> list
> > To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> > To subscribe, unsubscribe, or change list options,
> > visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> > or email: MIDRANGE-L-request@xxxxxxxxxxxx
> > Before posting, please take a moment to review the archives
> > at http://archive.midrange.com/midrange-l.
> >
>
> _______________________________________________
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.

Pete Hall
pbhall@xxxxxxxxxxxxx
http://www.pbhall.us/