----boundary-LibPST-iamunique-2082400688_-_-
Content-type: text/plain
Dear Mailing List Subscribers
As Helmut Zinn pointed out, the message with the subject 'TABINDEX' and the
official sender 'henrytv' seems to contain a virus. It is probably best, if you
do not open that particular message.
Please note that a lot of people can post to the mailing list, hence the actual
originator is hard to identify. We are running state-of-the-art virus protection
on our computers, but unfortunately cannot monitor what is just going through
the mailing list. Given these facts, it is almost certain that the message
originates from outside our company.
Since a while, our list server is configured to pass on only messages that (seem
to) originate from a list subscriber, all the others are being moderated. So
far, this scheme seemed to provide sufficient protection against spam and the
like. The TABINDEX message is the first (and I hope the only one for a while)
that bypassed moderation.
Sorry for the bother,
Wolfgang Weck
Oberon microsystems, Inc.
> -----Original Message-----
> From: Zinn, Helmut [mailto:Helmut.Zinn{([at]})nowhere.xy> Sent: Wednesday, May 22, 2002 11:18 AM
> To: 'blackbox{([at]})nowhere.xy> Subject: Eine Mail, die eine Virus Alarm auslöste
>
>
> Hallo
>
> heute morgen habe ich von Euch folgende Mail bekommen, die bei uns einen
> Virus Alarm auslöste:
>
> -----
> Betreff: TABINDEX
>
> Virus gefunden in der Mail von blackbox-request{([at]})nowhere.xy> Helmut.Zinn{([at]})nowhere.xy> am Tue, 21 May 2002 22:44:56 +0000 (UTC). Der Virus konnte nicht beseitigt
> werden aus folgendem Grund:
>
> Scenarios/Incoming/Sophos-AV: A virus has been detected: 'W32/Klez-G'.
> Scenarios/Incoming/Block Exe: 'ItemLength.GE.0'.
>
> Die Mail ist auf dem Virenscanner zwischen gespeichert, bitte beim
> Administrator
> melden.
> -----
>
> Unser Firewall-Administrator sagt es sei eine Mail ohne Text, die nur den
> Virus beinhaltet. Mehr war nicht zu erfahren. Ist das ein Fehlalarm oder hat
> es Ihr System erwischt?
>
> Viele Grüße
>
> Helmut Zinn
> --------------------------------------------
>
> To unsubscribe from this mailing list, send a message containing the
> word "unsubscribe" to:
> blackbox-request{([at]})nowhere.xy>
> To get a list of valid e-mail commands and instructions on their
> usage, send a message containing the word "help" to the above address.
>
> Send any problem reports or questions related to this email list to
> the list owner at
> owner-blackbox{([at]})nowhere.xy>
> Current posting policy:
>
> a) To post you should use the same address by which you are
> subscribed to the mailing list. That way, the list server will
> recognize you as subscriber and forward your posting immediately,
> without creating any overhead.
>
> b) If, for some reason, you cannot post from the address, by which
> you are subscribed, your message will be moderated to avoid spam.
> Please understand that moderation will often cause some delay, in
> particular over weekends or holydays.
--------------------------------------------
To unsubscribe from this mailing list, send a message containing the word "unsubscribe" to:
blackbox-request{([at]})nowhere.xy
To get a list of valid e-mail commands and instructions on their usage, send a message containing the word "help" to the above address.
Send any problem reports or questions related to this email list to the list owner at
owner-blackbox{([at]})nowhere.xy
Current posting policy:
a) To post you should use the same address by which you are subscribed to the mailing list. That way, the list server will recognize you as subscriber and forward your posting immediately, without creating any overhead.
b) If, for some reason, you cannot post from the address, by which you are subscribed, your message will be moderated to avoid spam. Please understand that moderation will often cause some delay, in particular over weekends or holydays.
----boundary-LibPST-iamunique-2082400688_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"
e1xydGYxXGFuc2lcYW5zaWNwZzEyNTJcZnJvbXRleHQgXGRlZmYwe1xmb250dGJsDQp7XGYwXGZz
d2lzc1xmY2hhcnNldDAgQXJpYWw7fQ0Ke1xmMVxmbW9kZXJuIENvdXJpZXIgTmV3O30NCntcZjJc
Zm5pbFxmY2hhcnNldDIgU3ltYm9sO30NCntcZjNcZm1vZGVyblxmY2hhcnNldDAgQ291cmllciBO
ZXc7fX0NCntcY29sb3J0YmxccmVkMFxncmVlbjBcYmx1ZTA7XHJlZDBcZ3JlZW4wXGJsdWUyNTU7
fQ0KXHVjMVxwYXJkXHBsYWluXGRlZnRhYjM2MCBcZjBcZnMyMCBEZWFyIE1haWxpbmcgTGlzdCBT
dWJzY3JpYmVyc1xwYXINClxwYXINCkFzIEhlbG11dCBaaW5uIHBvaW50ZWQgb3V0LCB0aGUgbWVz
c2FnZSB3aXRoIHRoZSBzdWJqZWN0ICdUQUJJTkRFWCcgYW5kIHRoZVxwYXINCm9mZmljaWFsIHNl
bmRlciAnaGVucnl0dicgc2VlbXMgdG8gY29udGFpbiBhIHZpcnVzLiBJdCBpcyBwcm9iYWJseSBi
ZXN0LCBpZiB5b3VccGFyDQpkbyBub3Qgb3BlbiB0aGF0IHBhcnRpY3VsYXIgbWVzc2FnZS5ccGFy
DQpccGFyDQpQbGVhc2Ugbm90ZSB0aGF0IGEgbG90IG9mIHBlb3BsZSBjYW4gcG9zdCB0byB0aGUg
bWFpbGluZyBsaXN0LCBoZW5jZSB0aGUgYWN0dWFsXHBhcg0Kb3JpZ2luYXRvciBpcyBoYXJkIHRv
IGlkZW50aWZ5LiBXZSBhcmUgcnVubmluZyBzdGF0ZS1vZi10aGUtYXJ0IHZpcnVzIHByb3RlY3Rp
b25ccGFyDQpvbiBvdXIgY29tcHV0ZXJzLCBidXQgdW5mb3J0dW5hdGVseSBjYW5ub3QgbW9uaXRv
ciB3aGF0IGlzIGp1c3QgZ29pbmcgdGhyb3VnaFxwYXINCnRoZSBtYWlsaW5nIGxpc3QuIEdpdmVu
IHRoZXNlIGZhY3RzLCBpdCBpcyBhbG1vc3QgY2VydGFpbiB0aGF0IHRoZSBtZXNzYWdlXHBhcg0K
b3JpZ2luYXRlcyBmcm9tIG91dHNpZGUgb3VyIGNvbXBhbnkuXHBhcg0KXHBhcg0KU2luY2UgYSB3
aGlsZSwgb3VyIGxpc3Qgc2VydmVyIGlzIGNvbmZpZ3VyZWQgdG8gcGFzcyBvbiBvbmx5IG1lc3Nh
Z2VzIHRoYXQgKHNlZW1ccGFyDQp0bykgb3JpZ2luYXRlIGZyb20gYSBsaXN0IHN1YnNjcmliZXIs
IGFsbCB0aGUgb3RoZXJzIGFyZSBiZWluZyBtb2RlcmF0ZWQuIFNvXHBhcg0KZmFyLCB0aGlzIHNj
aGVtZSBzZWVtZWQgdG8gcHJvdmlkZSBzdWZmaWNpZW50IHByb3RlY3Rpb24gYWdhaW5zdCBzcGFt
IGFuZCB0aGVccGFyDQpsaWtlLiBUaGUgVEFCSU5ERVggbWVzc2FnZSBpcyB0aGUgZmlyc3QgKGFu
ZCBJIGhvcGUgdGhlIG9ubHkgb25lIGZvciBhIHdoaWxlKVxwYXINCnRoYXQgYnlwYXNzZWQgbW9k
ZXJhdGlvbi5ccGFyDQpccGFyDQpTb3JyeSBmb3IgdGhlIGJvdGhlcixccGFyDQpcdGFiIFdvbGZn
YW5nIFdlY2tccGFyDQpcdGFiIE9iZXJvbiBtaWNyb3N5c3RlbXMsIEluYy5ccGFyDQpccGFyDQpc
cGFyDQpccGFyDQo+IC0tLS0tT3JpZ2luYWwgTWVzc2FnZS0tLS0tXHBhcg0KPiBGcm9tOiBaaW5u
LCBIZWxtdXQgW21haWx0bzpIZWxtdXQuWmlubkBpZ21ldGFsbC5kZV1ccGFyDQo+IFNlbnQ6IFdl
ZG5lc2RheSwgTWF5IDIyLCAyMDAyIDExOjE4IEFNXHBhcg0KPiBUbzogJ2JsYWNrYm94QG9iZXJv
bi5jaCdccGFyDQo+IFN1YmplY3Q6IEVpbmUgTWFpbCwgZGllIGVpbmUgVmlydXMgQWxhcm0gYXVz
bFwnZjZzdGVccGFyDQo+XHBhcg0KPlxwYXINCj4gSGFsbG9ccGFyDQo+XHBhcg0KPiBoZXV0ZSBt
b3JnZW4gaGFiZSBpY2ggdm9uIEV1Y2ggZm9sZ2VuZGUgTWFpbCBiZWtvbW1lbiwgZGllIGJlaSB1
bnMgZWluZW5ccGFyDQo+IFZpcnVzIEFsYXJtIGF1c2xcJ2Y2c3RlOlxwYXINCj5ccGFyDQo+IC0t
LS0tXHBhcg0KPiBCZXRyZWZmOiBUQUJJTkRFWFxwYXINCj5ccGFyDQo+IFZpcnVzIGdlZnVuZGVu
IGluIGRlciBNYWlsIHZvbiBibGFja2JveC1yZXF1ZXN0QG9iZXJvbi5jaCBhblxwYXINCj4gSGVs
bXV0Llppbm5AaWdtZXRhbGwuZGVccGFyDQo+ICBhbSBUdWUsIDIxIE1heSAyMDAyIDIyOjQ0OjU2
ICswMDAwIChVVEMpLiBEZXIgVmlydXMga29ubnRlIG5pY2h0IGJlc2VpdGlndFxwYXINCj4gd2Vy
ZGVuIGF1cyBmb2xnZW5kZW0gR3J1bmQ6XHBhcg0KPlxwYXINCj4gU2NlbmFyaW9zL0luY29taW5n
L1NvcGhvcy1BVjogQSB2aXJ1cyBoYXMgYmVlbiBkZXRlY3RlZDogJ1czMi9LbGV6LUcnLlxwYXIN
Cj4gU2NlbmFyaW9zL0luY29taW5nL0Jsb2NrIEV4ZTogJ0l0ZW1MZW5ndGguR0UuMCcuXHBhcg0K
PlxwYXINCj4gRGllIE1haWwgaXN0IGF1ZiBkZW0gVmlyZW5zY2FubmVyIHp3aXNjaGVuIGdlc3Bl
aWNoZXJ0LCBiaXR0ZSBiZWltXHBhcg0KPiBBZG1pbmlzdHJhdG9yXHBhcg0KPiBtZWxkZW4uXHBh
cg0KPiAtLS0tLVxwYXINCj5ccGFyDQo+IFVuc2VyIEZpcmV3YWxsLUFkbWluaXN0cmF0b3Igc2Fn
dCBlcyBzZWkgZWluZSBNYWlsIG9obmUgVGV4dCwgZGllIG51ciBkZW5ccGFyDQo+IFZpcnVzIGJl
aW5oYWx0ZXQuIE1laHIgd2FyIG5pY2h0IHp1IGVyZmFocmVuLiBJc3QgZGFzIGVpbiBGZWhsYWxh
cm0gb2RlciBoYXRccGFyDQo+IGVzIElociBTeXN0ZW0gZXJ3aXNjaHQ/XHBhcg0KPlxwYXINCj4g
VmllbGUgR3JcJ2ZjXCdkZmVccGFyDQo+XHBhcg0KPiBIZWxtdXQgWmlublxwYXINCj4gLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLS1ccGFyDQo+XHBhcg0KPiBUbyB1
bnN1YnNjcmliZSBmcm9tIHRoaXMgbWFpbGluZyBsaXN0LCBzZW5kIGEgbWVzc2FnZSBjb250YWlu
aW5nIHRoZVxwYXINCj4gd29yZCAidW5zdWJzY3JpYmUiIHRvOlxwYXINCj4gICAgYmxhY2tib3gt
cmVxdWVzdEBvYmVyb24uY2hccGFyDQo+XHBhcg0KPiBUbyBnZXQgYSBsaXN0IG9mIHZhbGlkIGUt
bWFpbCBjb21tYW5kcyBhbmQgaW5zdHJ1Y3Rpb25zIG9uIHRoZWlyXHBhcg0KPiB1c2FnZSwgc2Vu
ZCBhIG1lc3NhZ2UgY29udGFpbmluZyB0aGUgd29yZCAiaGVscCIgdG8gdGhlIGFib3ZlIGFkZHJl
c3MuXHBhcg0KPlxwYXINCj4gU2VuZCBhbnkgcHJvYmxlbSByZXBvcnRzIG9yIHF1ZXN0aW9ucyBy
ZWxhdGVkIHRvIHRoaXMgZW1haWwgbGlzdCB0b1xwYXINCj4gdGhlIGxpc3Qgb3duZXIgYXRccGFy
DQo+ICAgIG93bmVyLWJsYWNrYm94QG9iZXJvbi5jaFxwYXINCj5ccGFyDQo+IEN1cnJlbnQgcG9z
dGluZyBwb2xpY3k6XHBhcg0KPlxwYXINCj4gYSkgVG8gcG9zdCB5b3Ugc2hvdWxkIHVzZSB0aGUg
c2FtZSBhZGRyZXNzIGJ5IHdoaWNoIHlvdSBhcmVccGFyDQo+IHN1YnNjcmliZWQgdG8gdGhlIG1h
aWxpbmcgbGlzdC4gVGhhdCB3YXksIHRoZSBsaXN0IHNlcnZlciB3aWxsXHBhcg0KPiByZWNvZ25p
emUgeW91IGFzIHN1YnNjcmliZXIgYW5kIGZvcndhcmQgeW91ciBwb3N0aW5nIGltbWVkaWF0ZWx5
LFxwYXINCj4gd2l0aG91dCBjcmVhdGluZyBhbnkgb3ZlcmhlYWQuXHBhcg0KPlxwYXINCj4gYikg
SWYsIGZvciBzb21lIHJlYXNvbiwgeW91IGNhbm5vdCBwb3N0IGZyb20gdGhlIGFkZHJlc3MsIGJ5
IHdoaWNoXHBhcg0KPiB5b3UgYXJlIHN1YnNjcmliZWQsIHlvdXIgbWVzc2FnZSB3aWxsIGJlIG1v
ZGVyYXRlZCB0byBhdm9pZCBzcGFtLlxwYXINCj4gUGxlYXNlIHVuZGVyc3RhbmQgdGhhdCBtb2Rl
cmF0aW9uIHdpbGwgb2Z0ZW4gY2F1c2Ugc29tZSBkZWxheSwgaW5ccGFyDQo+IHBhcnRpY3VsYXIg
b3ZlciB3ZWVrZW5kcyBvciBob2x5ZGF5cy5ccGFyDQpccGFyDQotLS0tLS0tLS0tLS0tLS0tLS0t
LS0tLS0tLS0tLS0tLS0tLS0tLS0tLS0tLVxwYXINClxwYXINClRvIHVuc3Vic2NyaWJlIGZyb20g
dGhpcyBtYWlsaW5nIGxpc3QsIHNlbmQgYSBtZXNzYWdlIGNvbnRhaW5pbmcgdGhlIHdvcmQgInVu
c3Vic2NyaWJlIiB0bzpccGFyDQogICBibGFja2JveC1yZXF1ZXN0QG9iZXJvbi5jaFxwYXINClxw
YXINClRvIGdldCBhIGxpc3Qgb2YgdmFsaWQgZS1tYWlsIGNvbW1hbmRzIGFuZCBpbnN0cnVjdGlv
bnMgb24gdGhlaXIgdXNhZ2UsIHNlbmQgYSBtZXNzYWdlIGNvbnRhaW5pbmcgdGhlIHdvcmQgImhl
bHAiIHRvIHRoZSBhYm92ZSBhZGRyZXNzLlxwYXINClxwYXINClNlbmQgYW55IHByb2JsZW0gcmVw
b3J0cyBvciBxdWVzdGlvbnMgcmVsYXRlZCB0byB0aGlzIGVtYWlsIGxpc3QgdG8gdGhlIGxpc3Qg
b3duZXIgYXRccGFyDQogICBvd25lci1ibGFja2JveEBvYmVyb24uY2hccGFyDQpccGFyDQpDdXJy
ZW50IHBvc3RpbmcgcG9saWN5OlxwYXINClxwYXINCmEpIFRvIHBvc3QgeW91IHNob3VsZCB1c2Ug
dGhlIHNhbWUgYWRkcmVzcyBieSB3aGljaCB5b3UgYXJlIHN1YnNjcmliZWQgdG8gdGhlIG1haWxp
bmcgbGlzdC4gVGhhdCB3YXksIHRoZSBsaXN0IHNlcnZlciB3aWxsIHJlY29nbml6ZSB5b3UgYXMg
c3Vic2NyaWJlciBhbmQgZm9yd2FyZCB5b3VyIHBvc3RpbmcgaW1tZWRpYXRlbHksIHdpdGhvdXQg
Y3JlYXRpbmcgYW55IG92ZXJoZWFkLlxwYXINClxwYXINCmIpIElmLCBmb3Igc29tZSByZWFzb24s
IHlvdSBjYW5ub3QgcG9zdCBmcm9tIHRoZSBhZGRyZXNzLCBieSB3aGljaCB5b3UgYXJlIHN1YnNj
cmliZWQsIHlvdXIgbWVzc2FnZSB3aWxsIGJlIG1vZGVyYXRlZCB0byBhdm9pZCBzcGFtLiBQbGVh
c2UgdW5kZXJzdGFuZCB0aGF0IG1vZGVyYXRpb24gd2lsbCBvZnRlbiBjYXVzZSBzb21lIGRlbGF5
LCBpbiBwYXJ0aWN1bGFyIG92ZXIgd2Vla2VuZHMgb3IgaG9seWR9fQA+DQo+IEhlbG11dCBaaQ=
----boundary-LibPST-iamunique-2082400688_-_---
Received on Wed May 22 2002 - 17:52:30 UTC