Spam and virus attack
Archiver
Posts: 46,084
The recent personal email that we received from E-Lab Digital Engineering,
Inc concerning two new ICs was interesting. Having said that, I must say
that I am supprised that there was not much fuss consering the virus
infection that came with it. I spent a good chunk of yesterday getting rid
of it with Norton Antivirus. I know a few persons mentioned having been
infected. I suspect that everyone that received the email in question and
also uses Windows98 and Outlook Express V5 as their mail reader is now or
was infected.
This virus is known as the Wscript/Kak worm. You can read about it at:
http://www.cai.com/press/2000/01/wscript_kak.htm
NOTE: the URL reads wscript_kak.htm here
Here is a quote from the above site:
"Wscript.Kak spreads through e-mail using Outlook Express 5.0 on
Windows98 systems only.The worm will infect Windows98 systems running
Outlook Express 5.0 even if users don't open any attachments from the
infected mail."
Once infected, the virus attaches itself to ALL your outgoing e-mail.
I advise you to check this out if you received the email and use W98 and
Outlook Express V5. I sent an e-mail to Todd Peterson advising him of what
he had done and asked to be removed from his mailing list. I undersatand
that others on this maillist have notified his ISP abuse person of the
problem. I suspect that Mr. Peterson was unaware of the worm.
Vic
__________________________________________
Victor Fraenckel vfraenc1@n...
Home of the WindReader Electronic Theodolite
Read the WIND
Inc concerning two new ICs was interesting. Having said that, I must say
that I am supprised that there was not much fuss consering the virus
infection that came with it. I spent a good chunk of yesterday getting rid
of it with Norton Antivirus. I know a few persons mentioned having been
infected. I suspect that everyone that received the email in question and
also uses Windows98 and Outlook Express V5 as their mail reader is now or
was infected.
This virus is known as the Wscript/Kak worm. You can read about it at:
http://www.cai.com/press/2000/01/wscript_kak.htm
NOTE: the URL reads wscript_kak.htm here
Here is a quote from the above site:
"Wscript.Kak spreads through e-mail using Outlook Express 5.0 on
Windows98 systems only.The worm will infect Windows98 systems running
Outlook Express 5.0 even if users don't open any attachments from the
infected mail."
Once infected, the virus attaches itself to ALL your outgoing e-mail.
I advise you to check this out if you received the email and use W98 and
Outlook Express V5. I sent an e-mail to Todd Peterson advising him of what
he had done and asked to be removed from his mailing list. I undersatand
that others on this maillist have notified his ISP abuse person of the
problem. I suspect that Mr. Peterson was unaware of the worm.
Vic
__________________________________________
Victor Fraenckel vfraenc1@n...
Home of the WindReader Electronic Theodolite
Read the WIND
Comments
> This virus is known as the Wscript/Kak worm. You can read about it at:
>
> http://www.cai.com/press/2000/01/wscript_kak.htm
>
snip
i am win98 and out exp v5 and i didnt get any virus, just to be sure
yesterday i downloaded the latest ver of my anti virus sw and re ran its
check.
no virus found at all.
norm
norm.doty@w... writes:
> i am win98 and out exp v5 and i didnt get any virus, just to be sure
> yesterday i downloaded the latest ver of my anti virus sw and re ran its
> check.
>
> no virus found at all.
>
> norm
>
Norm,
I would try again if you are not useing Norton. My brother found it on his
computer and gateway told him that some of the virus protection software was
not finding this virus. I know that Norton has been successful and you can
download an evaluation copy just to be sure.
Luck
Dan
>>> "norm doty" <norm.doty@w...> 04/21/00 07:21AM >>>
>
> This virus is known as the Wscript/Kak worm. You can read about it at:
>
> http://www.cai.com/press/2000/01/wscript_kak.htm
>
snip
i am win98 and out exp v5 and i didnt get any virus, just to be sure
yesterday i downloaded the latest ver of my anti virus sw and re ran its
check.
no virus found at all.
norm
·http://smallbiz.symantec.com/sym39.cfm?JID=1&PID=152007
I realize it's not on stamp-topic, but it fits the thread<G>
Scott Tappan wrote:
>>> "norm doty" <norm.doty@worldnet.att.net> 04/21/00 07:21AM >>>
>
> This virus is known as the Wscript/Kak worm. You can read about itat:
>
>········ http://www.cai.com/press/2000/01/wscript_kak.htm
>
snip
i am win98 and out exp v5 and i didnt get any virus, just to be sure
yesterday i downloaded the latest ver of my anti virus sw and re ranits
check.
no virus found at all.
norm
--
ARC in· Lago Vista, TX
Semper Ubi Sub Ubi - Always wear Underwear.
That is strange. I run win98 & outexp5 and received a virus alert as soon
as I clicked on the mail, (Norton). Someone told me of another worm that
RANDOMLY attached itself to outgoing mail, not every single mailing. Maybe
that is the case here?
Ray McArthur
Original Message
From: norm doty <norm.doty@w...>
To: <basicstamps@egroups.com>
Sent: Friday, April 21, 2000 8:21 AM
Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
> i am win98 and out exp v5 and i didnt get any virus, just to be sure
> yesterday i downloaded the latest ver of my anti virus sw and re ran its
> check.
>
> no virus found at all.
Out - Express v5 found the active X code and asked me what to
do with it. I have Security to NOT run active X, JavaScript
or Java with out asking first. All I had to do is delete it.
Kevin
> Norm:
> That is strange. I run win98 & outexp5 and received a virus alert as soon
> as I clicked on the mail, (Norton). Someone told me of another worm that
> RANDOMLY attached itself to outgoing mail, not every single mailing.
Maybe
> that is the case here?
>
> Ray McArthur
>
>
Original Message
> From: norm doty <norm.doty@w...>
> To: <basicstamps@egroups.com>
> Sent: Friday, April 21, 2000 8:21 AM
> Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
>
>
> > i am win98 and out exp v5 and i didnt get any virus, just to be sure
> > yesterday i downloaded the latest ver of my anti virus sw and re ran its
> > check.
> >
> > no virus found at all.
>
>
>
>
>
> "top" 5 viruses sweeping around right now:
> http://smallbiz.symantec.com/sym39.cfm?JID=1&PID=152007
> I realize it's not on stamp-topic, but it fits the thread<G>
snip
it helps real good, i found the kak virus, my just updated virus sw
didnt catch it.
thank you very much for the info and help.
people do a [noparse][[/noparse]start] [noparse][[/noparse]find] [noparse][[/noparse]files or folders] and enter kak
if it finds kak.htm you have it also.
norm, now rid of kak.
Do you mind telling us your virus software that missed it. According to the
stuff I read, it may have already attached itself to your email list/address
book? Maybe you should get a copy of Norton and double-check.
Regards,
Ray McArthur
Original Message
From: norm doty <norm.doty@w...>
To: <basicstamps@egroups.com>
Sent: Friday, April 21, 2000 3:47 PM
Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
>
>
> > This arrived from Symantec yesterday - it has some interesting info on
the
> > "top" 5 viruses sweeping around right now:
> > http://smallbiz.symantec.com/sym39.cfm?JID=1&PID=152007
> > I realize it's not on stamp-topic, but it fits the thread<G>
>
> snip
>
> it helps real good, i found the kak virus, my just updated virus sw
> didnt catch it.
>
> thank you very much for the info and help.
>
> people do a [noparse][[/noparse]start] [noparse][[/noparse]find] [noparse][[/noparse]files or folders] and enter kak
> if it finds kak.htm you have it also.
>
> norm, now rid of kak.
>
>
>
>
controll.
norm
Original Message
From: rjmca <rjmca@w...>
To: <basicstamps@egroups.com>
Sent: Friday, April 21, 2000 4:07 PM
Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
> Norm:
> Do you mind telling us your virus software that missed it. According to
the
> stuff I read, it may have already attached itself to your email
list/address
> book? Maybe you should get a copy of Norton and double-check.
>
> Regards,
> Ray McArthur
>
>
Original Message
> From: norm doty <norm.doty@w...>
> To: <basicstamps@egroups.com>
> Sent: Friday, April 21, 2000 3:47 PM
> Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
>
>
> >
> >
> > > This arrived from Symantec yesterday - it has some interesting info on
> the
> > > "top" 5 viruses sweeping around right now:
> > > http://smallbiz.symantec.com/sym39.cfm?JID=1&PID=152007
> > > I realize it's not on stamp-topic, but it fits the thread<G>
> >
> > snip
> >
> > it helps real good, i found the kak virus, my just updated virus sw
> > didnt catch it.
> >
> > thank you very much for the info and help.
> >
> > people do a [noparse][[/noparse]start] [noparse][[/noparse]find] [noparse][[/noparse]files or folders] and enter kak
> > if it finds kak.htm you have it also.
> >
> > norm, now rid of kak.
> >
> >
> >
> >
>
>
>
>
>Norm:
>That is strange. I run win98 & outexp5 and received a virus alert as soon
>as I clicked on the mail, (Norton). Someone told me of another worm that
>RANDOMLY attached itself to outgoing mail, not every single mailing. Maybe
>that is the case here?
Yup !
>Ray McArthur
>
>
Original Message
>From: norm doty <norm.doty@w...>
>To: <basicstamps@egroups.com>
>Sent: Friday, April 21, 2000 8:21 AM
>Subject: Re: [noparse][[/noparse]basicstamps] Spam and virus attack
>
>
>> i am win98 and out exp v5 and i didnt get any virus, just to be sure
>> yesterday i downloaded the latest ver of my anti virus sw and re ran its
>> check.
>>
>> no virus found at all.
>
>
>
>
>
>