From owner-freebsd-hackers Sat Mar 2 07:47:59 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.3/8.7.3) id HAA21692 for hackers-outgoing; Sat, 2 Mar 1996 07:47:59 -0800 (PST) Received: from explorer.netserv.chula.ac.th (explorer.netserv.chula.ac.th [161.200.192.200]) by freefall.freebsd.org (8.7.3/8.7.3) with ESMTP id HAA21672 for ; Sat, 2 Mar 1996 07:47:49 -0800 (PST) Received: from pioneer.netserv.chula.ac.th (pioneer.netserv.chula.ac.th [161.200.192.12]) by explorer.netserv.chula.ac.th (8.7.3/8.7.3) with ESMTP id WAA02645; Sat, 2 Mar 1996 22:55:27 GMT Received: by pioneer.netserv.chula.ac.th (8.7.1) id WAA07365; Sat, 2 Mar 1996 22:38:16 GMT Date: Sat, 2 Mar 1996 22:38:15 +0000 (TST) From: Ravis Tasakorn To: "Jordan K. Hubbard" cc: Jon Loeliger , hackers@FreeBSD.ORG Subject: Re: Virus checking In-Reply-To: <3299.825539746@time.cdrom.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-hackers@FreeBSD.ORG Precedence: bulk Dear All I've just count myself to subscriber of freebsd-hackers-digest and wonna join you , Is this the way to treat new member ? Ah! :-( I really wonna know it !!! and if what I've asked is silly,I'm apologize to you. *!@#$dvfdkfdfbfbbllk >:-( Ravis. On Wed, 28 Feb 1996, Jordan K. Hubbard wrote: > [ Oh dear, it's as I thought ] > > > Jon Loelinger writes: > > > >>So, like Ravis Tasakorn was saying to me just the other day: > >> Dear Users > >> > >> I'd like to know if any of you have URL of cool sites where I can > >> download virus killer shareware programs. > >> > >> It may be some of these virtual creatures living in my harddisk,Ah! :( > >> > > > > Yes, and they sound somewhat intelligent too. Odd... > > Only just.. I did think to subject Ravis to a turing test in a short > round of private email, and he failed it, so I'd say this is simply > another manifestation of the MAILBOMBER virus they've been talking > about over on AOL. > > Yep, MAILBOMBER is one of the more insidious little virii to come out > of Eastern Europe. It apparently forges mail from a randomly > constructed alias and posts it to a randomly selected mailing list > (ours, unfortunately, appearing to be one of compiled-in choices). > The topic of the message is, of course, viruses and whether you have > any information on them. It then scans the replies it gets to see if > the keyword MAILBOMBER appears anywhere, thus cleverly measuring its > own levels of notoriety and taking various protective measures when > certain thresholds are exceeded. > > Fortunately, numerous bugs in its natural language output algorithm > make it rather easy to catch. It seems that the author wasn't a > native speaker of english, and he coded certain linguistic > misunderstandings on his part directly into the virus. > > In short, it may be a highly sophisticated piece of work, but it still > speaks terrible english. > > Hopefully my mention of it 3 times in this message should trigger its > response mechanism into fleeing this particular mailing list. > > Jordan >