Re: Scrolling WARNING
- Bill McCarthy wrote:
> The email with subject "Scrolling" contains a virus.If you are using MS-Windows, and especially when using Outlook, you
> My laptop is infected with it and Office Scan didn't help.
> It appears to delete .exe files on my Win2000 system.
> The only fix I know of is to reinstall the operating system.
> Any other ideas?
should get a good virus scanner.
I receive about 30 virus messages each day. My FreeBSD system isn't
This is the first virus message coming from the Vim maillist. I wonder
how it managed to get by the required subscription block. In case it
helps, this was the header:
> Return-Path: <vim-dev-return-19355-Bram=moolenaar.net@...>I have removed the message from the archive at Yahoo to avoid any
> Delivered-To: mool-moolenaar:net-Bram@...
> X-Envelope-To: bram@...
> Received: (qmail 63196 invoked from network); 30 Apr 2002 16:36:20 -0000
> Received: from foobar.math.fu-berlin.de (18.104.22.168)
> by ulwar.pair.com with SMTP; 30 Apr 2002 16:36:20 -0000
> Received: (qmail 25445 invoked by uid 200); 30 Apr 2002 16:35:51 -0000
> Mailing-List: contact vim-dev-help@...; run by ezmlm
> Precedence: bulk
> Delivered-To: mailing list vim-dev@...
> Received: (qmail 25437 invoked from network); 30 Apr 2002 16:35:50 -0000
> From: guckes <guckes@...>
> To: vim-dev@...
> Subject: Scrolling
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
> Message-Id: <20020430163357.VBMF2361.out005.verizon.net@Ecehqrf>
> Date: Tue, 30 Apr 2002 11:35:00 -0500
[Autumn changed into Winter ... Winter changed into Spring ... Spring
changed back into Autumn and Autumn gave Winter and Spring a miss and
went straight on into Summer ... Until one day ...]
"Monty Python and the Holy Grail" PYTHON (MONTY) PICTURES LTD
/// Bram Moolenaar -- Bram@... -- http://www.moolenaar.net \\\
/// Creator of Vim -- http://vim.sf.net -- ftp://ftp.vim.org/pub/vim \\\
\\\ Project leader for A-A-P -- http://www.a-a-p.org ///
\\\ Help me helping AIDS orphans in Uganda - http://iccf-holland.org ///
- Am I just paranoid, or is it a strange coincidence that
this virus got posted to the list just after an in-depth
discussion about the rights and wrongs of HTML mails on
the vim-dev list?
After all the poster had to specifically spoof the
headers in order to get the message to the list.
- On Wed, 1 May 2002, Vince Negri wrote:
>Nope, you're just paranoid. (But that doesn't mean they're not out to
> Am I just paranoid, or is it a strange coincidence that
> this virus got posted to the list just after an in-depth
> discussion about the rights and wrongs of HTML mails on
> the vim-dev list?
> After all the poster had to specifically spoof the
> headers in order to get the message to the list.
get you ;) If you read the description of the virus, it automatically
spoofs the headers to make the From: line be someone you have received
email from before. And, in fact, the HTML discussion came up as a reply
to an earlier post of the same virus. So, probably the virus spread to
the list via some vim-dev subscriber's address book, another vim-dev
subscriber contracted it, and eventually it forwarded itself back to the
list again, claiming to be a third subscriber.