Re: [CAD_CAM_EDM_DRO] Re: Attachments?

Hi Mariss, List,

It's worse then that. I have been getting my emails at work, where I
run Norton's newest virus scanner. Works on email receive/send. Caught
2 or 3 last and this week. I killed the messages at the server before I
pulled them off the server at home (only old norton at home). Fine. No
problems. Today, I got my mail at home, and Bob Campbell's mail came
in, no text, NO ATTACHMENT. I deleted it immediately, and exited to run
my old Norton AV. No viruses. On a hunch, I loaded the newest one, and
IT FOUND that two of my files had been infected:
c:\windows\system\KERN32.EXE backdoor Trojan
c:\windows\inetd.EXE W32.BATtrans.g..

A through scan found two more:

c:\windows\system\KHSDLL.DLL W32.BATtrans.g..
c:\CNC\MERT.PIF W32.BATtrans.g..

So I'd advise all to be careful! These can't be cleaned up by AV.

I've looked on two other systems and the windoz98 2ed disk for
KERN32.EXE, INETD.EXE, and KHSDLL.DLL, but haven't been able to find
them (I have two other '98 machines running here)! I wonder if anyone
has any ideas how to replace these files? I'm gonna check Norton for
the instructions, as I don't know how to get them out of the CAB
archieves in the CD.

Just talking on the HAM radio (440.85 Mhz) to a pair of network/OS
types, and they suggest that these files are NOT needed. Windoz gave me
2 or 3 messages that suggested that they were needed to run
applications.

Well, AV is watching my mail now, so hopefully no more problems. Don't
ya just LOVE computers!

Alan KM6VV


mariss92705@... wrote:

>
> Hi,
>
> Our policy here is to open only .pdf, .jpeg, .dwg, .dxf and .txt
> attachments only unless previous arrangments have been made and I
> know the attachment name ahead of time. We never open .exe or dual
> extension files ever. Keeps the machine clean that way.
>
> Mariss
>
> --- In CAD_CAM_EDM_DRO@y..., "Doug Harrison" <prototype@c...> wrote:
> > With all the talk lately about virus files coming from list
> members, I
> > thought I would post something curious.
> >
> > I have received several posts in the last week from CCED and
> another Yahoo
> > Group with files attached. Perhaps I should clarify that. The
> posts were
> > made to appear to be coming through the Yahoo lists. The "from"
> address was
> > correct but both groups are configured to strip attachments. I
> don't know
> > what the files were because my system is set to reject all
> attachments.
> > Thus, all I got was a message stating what had happened.
> >
> > Bob Campbell, you might want to check your computer. The last one
> had your
> > name on it. I'm guessing that someone has created a script that
> sends mail
> > looking like list mail. Perhaps they have a thing for Yahoo.
> >
> > Doug
>
> Addresses:
> FAQ: http://www.ktmarketing.com/faq.html
> FILES: http://groups.yahoo.com/group/CAD_CAM_EDM_DRO/files/
>
> Post messages: CAD_CAM_EDM_DRO@yahoogroups.com
> Subscribe: CAD_CAM_EDM_DRO-subscribe@yahoogroups.com
> Unsubscribe: CAD_CAM_EDM_DRO-unsubscribe@yahoogroups.com
> List owner: CAD_CAM_EDM_DRO-owner@yahoogroups.com, wanliker@...
> Moderator: jmelson@... timg@... [Moderator]
> URL to this page: http://groups.yahoo.com/group/CAD_CAM_EDM_DRO
> bill,
> List Manager
>
>
>
> Your use of Yahoo! Groups is subject to http://docs.yahoo.com/info/terms/