From owner-freebsd-security Sun Sep 26 10:30:38 1999 Delivered-To: freebsd-security@freebsd.org Received: from saturn.psn.net (saturn.psn.net [207.211.58.15]) by hub.freebsd.org (Postfix) with ESMTP id 0CC8615190 for ; Sun, 26 Sep 1999 10:30:36 -0700 (PDT) (envelope-from will@blackdawn.com) Received: from shadow.blackdawn.com (5042-243.008.popsite.net [209.224.140.243]) by saturn.psn.net (8.9.3/8.9.3) with ESMTP id KAA04381; Sun, 26 Sep 1999 10:38:54 -0700 (MST) Received: (from will@localhost) by shadow.blackdawn.com (8.9.3/8.9.3) id NAA02276; Sun, 26 Sep 1999 13:30:16 -0400 (EDT) (envelope-from will) Message-ID: X-Mailer: XFMail 1.3 [p0] on FreeBSD X-Priority: 3 (Normal) Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 8bit MIME-Version: 1.0 In-Reply-To: <005d01bf07d3$07a5e630$fd01a8c0@pacbell.net> Date: Sun, 26 Sep 1999 13:30:16 -0400 (EDT) Reply-To: Will Andrews From: Will Andrews To: John Howie Subject: RE: URGENT - READ THIS EMAIL BEFORE ANY OTHERS FROM ME Cc: security@FreeBSD.ORG Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org [ Sorry, I couldn't resist ] On 26-Sep-99 John Howie wrote: > Unfortunately I have been hit by an email virus. It can potentially damage > your system and it replicates by sending a copy of itself to everyone in an > Address Book. I believe that I managed to catch the virus before it > replicated itself but if you did receive a message from me entitled > "C:\CoolProgs\Pretty Park.exe" DELETE THE EMAIL WITHOUT READING IT. Oh yeah, I just noticed, I have a "C:\CoolProgs\Pretty Park.exe" in my /usr! Yikes, is the program going to run "rm -rf /" suid root when I'm not using my box?!? *AIIEEE* this is calls for Warner Losh's concern!!! -- Will Andrews GCS/E/S @d- s+:+>+:- a--->+++ C++ UB++++ P+ L- E--- W+++ !N !o ?K w--- ?O M+ V-- PS+ PE++ Y+ PGP+>+++ t++ 5 X++ R+ tv+ b++>++++ DI+++ D+ G++>+++ e->++++ h! r-->+++ y? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message