Mailing-List:	contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe:	<mailto:cygwin-subscribe AT sources DOT redhat DOT com>
List-Archive:	<http://sources.redhat.com/ml/cygwin/>
List-Post:	<mailto:cygwin AT sources DOT redhat DOT com>
List-Help:	<mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
Sender:	cygwin-owner AT sources DOT redhat DOT com
Delivered-To:	mailing list cygwin AT sources DOT redhat DOT com
Message-ID:	<006401c08c3b$18a6d640$0200a8c0@lifelesswks>
From:	"Robert Collins" <robert DOT collins AT itdomain DOT com DOT au>
To:	"Postmaster" <postmaster AT magwien DOT gv DOT at>, <cygwin AT cygwin DOT com>
References:	<030172466038 AT relay DOT magwien DOT gv DOT at> <20010131122102 DOT G25373 AT redhat DOT com> <3A793B28 DOT 585186D8 AT magwien DOT gv DOT at>
Subject:	Re: Computer Virus
Date:	Thu, 1 Feb 2001 21:38:18 +1100
MIME-Version:	1.0
X-Priority:	3
X-MSMail-Priority:	Normal
X-Mailer:	Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE:	Produced By Microsoft MimeOLE V5.50.4133.2400
X-OriginalArrivalTime:	01 Feb 2001 10:32:57.0947 (UTC) FILETIME=[580AD2B0:01C08C3A]

Perhaps you should tighten your mail filters to only exclude regs that refer to dangerous keys. There's only a dozen or so,
documented by MS, and if you were still concerned, you could filter reg files with key values containing .bat, .exe & .com as well.
That's pretty likely to cover most scenarios.

Rob

----- Original Message -----
From: "Postmaster" <postmaster AT magwien DOT gv DOT at>
To: <cygwin AT cygwin DOT com>
Sent: Thursday, February 01, 2001 9:32 PM
Subject: Re: Computer Virus


> REGs are not allowed!
> postmaster AT magwien DOT gv DOT at
>
>
> Christopher Faylor wrote:
>
> > THIS WAS NOT A VIRUS.  GET A CLUE.
> >
> > On Wed, Jan 31, 2001 at 05:24:42PM +0100, Mailer-Daemon AT magwien DOT gv DOT at wrote:
> > >Achtung, die von Ihnen versandte Mail enthaelt entweder
> > >einen Computer Virus oder mindestens eine beigefuegte Datei des Typs
> > >BAT, CHM, CMD, COM, CPL, EXE, HLP, INF, INS, ISP, JAR, JS, JSE, LNK, MDB, MDE,
> > >MSC, MSI, MSP, MST, OCX, PIF, PL, REG, SCR, SCT, SHB, SHS, VB, VBE, VBS, WSC,
> > >WSF, WSH
> > >und wurde daher nicht an den Empfaenger weitergeleitet.
> > >
> > >Wenn Sie Dateien der genannten Typen senden wollen, koennen Sie
> > >diese innerhalb einer ZIP oder TAR Datei, welche Sie Ihrer Mail
> > >beifuegen, uebertragen.
> > >
> > >Attention, your mail contains either a computer virus or one of
> > >the following attachment types:
> > >BAT, CHM, CMD, COM, CPL, EXE, HLP, INF, INS, ISP, JAR, JS, JSE, LNK, MDB, MDE,
> > >MSC, MSI, MSP, MST, OCX, PIF, PL, REG, SCR, SCT, SHB, SHS, VB, VBE, VBS, WSC,
> > >WSF, WSH.
> > >These types are not delivered to the final recipients. If you want
> > >to send one of these types, please encode them as ZIP or TAR files.
> > >
> > >postmaster AT magwien DOT gv DOT at
> > >
> > >----- Unsent message follows -----
> > >
> > >Received: from sourceware.cygnus.com(205.180.83.71) by mozart.adv.magwien.gv.at via smap (V2.0)
> > >       id xma064270; Wed, 31 Jan 01 17:17:00 +0100
> > >Received: (qmail 27033 invoked by alias); 31 Jan 2001 15:42:29 -0000
> > >Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
> > >Precedence: bulk
> > >List-Unsubscribe: <mailto:cygwin-unsubscribe-sef=adv DOT magwien DOT gv DOT at AT sources DOT redhat DOT com>
> > >List-Subscribe: <mailto:cygwin-subscribe AT sources DOT redhat DOT com>
> > >List-Archive: <http://sources.redhat.com/ml/cygwin/>
> > >List-Post: <mailto:cygwin AT sources DOT redhat DOT com>
> > >List-Help: <mailto:cygwin-help AT sources DOT redhat DOT com>, <http://sources.redhat.com/ml/#faqs>
> > >Sender: cygwin-owner AT sources DOT redhat DOT com
> > >Delivered-To: mailing list cygwin AT sources DOT redhat DOT com
> > >Received: (qmail 26939 invoked from network); 31 Jan 2001 15:42:22 -0000
> > >Received: from runyon.cygnus.com (HELO cygnus.com) (205.180.230.5)
> > >  by sourceware.cygnus.com with SMTP; 31 Jan 2001 15:42:22 -0000
> > >Received: from rtl.cygnus.com (loony.cygnus.com [205.180.230.181])
> > >       by runyon.cygnus.com (8.8.7-cygnus/8.8.7) with ESMTP id HAA12500
> > >       for <cygwin AT cygwin DOT com>; Wed, 31 Jan 2001 07:42:15 -0800 (PST)
> > >Received: (from cgf AT localhost)
> > >       by rtl.cygnus.com (8.11.1/8.8.7) id f0VFh6325014
> > >       for cygwin AT cygwin DOT com; Wed, 31 Jan 2001 10:43:06 -0500
> > >Date: Wed, 31 Jan 2001 10:43:06 -0500
> > >From: Christopher Faylor <cygwin AT cygwin DOT com>
> > >To: cygwin AT cygwin DOT com
> > >Subject: Workaround for heap errors in 1.1.8/Windows 9x
> > >Message-ID: <20010131104306 DOT A24819 AT redhat DOT com>
> > >Reply-To: cygwin AT cygwin DOT com
> > >Mail-Followup-To: cygwin AT cygwin DOT com
> > >Mime-Version: 1.0
> > >Content-Type: multipart/mixed; boundary="n8g4imXOkfNTN/H1"
> > >Content-Disposition: inline
> > >User-Agent: Mutt/1.3.11i
> > >X-Header-From: Christopher Faylor <cygwin AT cygwin DOT com>
> > >X-Header-From: Christopher Faylor <cygwin AT cygwin DOT com>
> > >
> > >
> > >----- Message body suppressed -----
> > >
> > >--
> > >Want to unsubscribe from this list?
> > >Check out: http://cygwin.com/ml/#unsubscribe-simple
>
>
> --
> Want to unsubscribe from this list?
> Check out: http://cygwin.com/ml/#unsubscribe-simple
>
>


--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple

- Raw text -