Great Circle Associates List-Managers
(March 1996)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: alert! to possible bomb/boobytrap/virus
From: Alex Nunes <alex @ venus . co . uk>
Date: Wed, 27 Mar 1996 19:56:59 +0000 (GMT)
To: Ken Dykes <kgdykes @ Thinkage . On . CA>
Cc: list-managers @ GreatCircle . COM
In-reply-to: <199603271125.GAA15182@hog.thinkage.on.ca>


May be it's another good times type hoax, 
on the one it looks apple mac-ish:

> > x-mac-type="705A4950"; x-mac-creator="705A4950"

yet:

> >Content-Type: application/zip; name="4dtime40.zip";

is zip used in the mac world? how many mac users have zip decompression 
software?

If this were a virus, wouldn't it be another mime type? Not that one 
shouldn't be wary.

alex


Alex Nunes at Venus Internet Ltd, 24 Denmark Street, London WC2H 8NJ, UK
              email:alex@venus.co.uk web:http://www.venus.co.uk
              Tel: +44 (0)171 240 5858 Fax: +44 (0)171 240 5859
              Providing Web and Internet services and solutions       

On Wed, 27 Mar 1996, Ken Dykes wrote:

> Date: Wed, 27 Mar 1996 06:25:14 -0500 (EST)
> From: Ken Dykes <kgdykes@Thinkage.On.CA>
> To: list-managers@GreatCircle.COM
> Subject: alert! to possible bomb/boobytrap/virus
> 
> i just received the following, it smells very fishy, i sure aint
> opening it...
> pity those folks with "automated mime".
>    -ken
> 
> -----
> 
> >From proguest@users.redrose.net Wed Mar 27 05:09:18 1996
> >Received: from users.success.net (root@[204.249.184.40])
> >    by thinkage (8.7.1(8.6.4)/Thinkage960219) with SMTP
> >    id FAA23210 for <kgdykes@thinkage.on.ca>; Wed, 27 Mar 1996 05:05:46 -0500 (EST)
> >Received: from BlueFootedBoobie ([198.70.185.245]) by users.success.net (8.6.9/8.6.9) with SMTP id DAA01056; Wed, 27 Mar 1996 03:03:43 -0500
> >Message-Id: <2.2.32.19960327075746.006bbbc0@users.redrose.net>
> >X-Sender: proguest@users.redrose.net
> >X-Mailer: Windows Eudora Pro Version 2.2 (32)
> >Mime-Version: 1.0
> >Content-Type: multipart/mixed; boundary="=====================_827931466==_"
> >Date: Wed, 27 Mar 1996 02:57:46 -0500
> >To: rchao@netcom.com, vegasbob@earthlink.net, hawkston@cpcn.com,
> >        donfhbbs@usa.pipeline.com, ezine@nando.net, nardi@erols.com,
> > <whole bunch of addresses deleted>
> >From: Charlie Chan <proguest@users.redrose.net>
> >Subject: Really Cool file...
> >X-Attachments: E:\Work\4dtime40.zip;
> >
> >--=====================_827931466==_
> >Content-Type: text/plain; charset="us-ascii"
> >
> >        here's a really cool file that will help you out while you're on the
> >internet.  Give it a try.  
> >
> >--=====================_827931466==_
> >Content-Type: application/zip; name="4dtime40.zip";
> > x-mac-type="705A4950"; x-mac-creator="705A4950"
> >Content-Transfer-Encoding: base64
> >Content-Disposition: attachment; filename="4dtime40.zip"
> >
> >UEsDBBQAAgAIAAAgSSB01c6UaAkAAJoeAAAKAAAAU0VSVkVSLkRBVK1ZW3faPhLv2cee0+/gp30i
> >OiW7X4CQpKX/QLI4afe/b4M82Aqy5OoCIZ9+Z2wTjEnTS/IAGKT5aW6aG4/v3r2DqtIopC0/vL9L
> >R4NkzK9YoQvK2EEy4uVkbMsqBnQf3hPFu4UKfitKFQRmsSWbMhmUC6eyHOnr5DaZmKV1JQRlTZJu
> >fcDSN/QSjDVCGadALAnz0oGRRDS38ntEI210YZBMZvPJqCUonDXWi2jU+sShMeiHB5RnTgUw20Fy
> >etc...
> 
> (i have retained the complete untouched message)
> 


Follow-Ups:
References:
Indexed By Date Previous: alert! to possible bomb/boobytrap/virus
From: Ken Dykes <kgdykes@Thinkage.On.CA>
Next: Re: alert! to possible bomb/boobytrap/virus
From: Info-LabVIEW List Maintainer <info-labview-request@pica.army.mil>
Indexed By Thread Previous: alert! to possible bomb/boobytrap/virus
From: Ken Dykes <kgdykes@Thinkage.On.CA>
Next: Re: alert! to possible bomb/boobytrap/virus
From: Al Gilman <asgilman@access.digex.net>

Google
 
Search Internet Search www.greatcircle.com