Subject: [os2genau_digest] No. 463
From: Digest <deadmail>
To: "OS/2GenAu Digest"<deadmail>
Date: Sun, 6 Oct 2002 00:02:04 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600

**************************************************
Saturday 05 October 2002
 Number  463
**************************************************

Subjects for today
 
1  Re: [os2genau] Jalbum ?? : Ian Manners" <deadmail>
2  Re: [os2genau] Jalbum ?? : Voytek Eymont <voytek at sbt dot net dot au>
3  Re: [os2genau] Anyone want to have a go at this? : Ed Durrant <edurrant at bigpond dot net dot au>
4  Re: [os2genau] Anyone want to have a go at this? : Ian Manners" <deadmail>
5  Re: [os2genau] Anyone want to have a go at this? : Gregory Hicks <ghicks at ihug dot com dot au>
6  [os2genau] Virus, was - Anyone want to have a go at this? : Ian Manners" <deadmail>
7  Re: [os2genau] Virus, was - Anyone want to have a go at this? : Gregory Hicks <ghicks at ihug dot com dot au>
8  Re: [os2genau] Virus, was - Anyone want to have a go at this? : Ian Manners" <deadmail>
9  Re: [os2genau] Virus, was - Anyone want to have a go at this? : bob <bob at fots dot org dot au>
10  Re: [os2genau] Anyone want to have a go at this? : nickl at arach dot net dot au
11  Re: [os2genau] Virus, was - Anyone want to have a go at this? : Ian Manners" <deadmail>
12  Re: [os2genau] Virus, was - Anyone want to have a go at this? : bob <bob at fots dot org dot au>
13  [os2genau] winclap Re: [os2genau] Anyone want to have a go at this? : Voytek Eymont <voytek at sbt dot net dot au>
14  Re: [os2genau] Anyone want to have a go at this? : Voytek Eymont <voytek at sbt dot net dot au>
15  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this? : Ian Manners" <deadmail>
16  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this? : Michael Taylor <miket at pcug dot org dot au>
17  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this? : Ian Manners" <deadmail>
18  Re: [os2genau] _digest] INTERNAL MODEM : Daryl Pilkington" <u3232 at home.dialix dot com>
19  Re: [os2genau] Virus, was - Anyone want to have a go at this? : Gavin Miller" <drumextreme at impulse dot net dot au>
20  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this? : Michael Taylor <miket at pcug dot org dot au>
21  Re: [os2genau] Anyone want to have a go at this? : Ed Durrant <edurrant at bigpond dot net dot au>

**= Email   1 ==========================**

Date:  Sat, 05 Oct 2002 01:57:32 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] Jalbum ??

Hi Tom

Welcome to the list :)

>Is anyone using Jalbum under OS/2  (http://www.datadosen.se/jalbum/) ??
>I'd love to use this program. I am using it now under Windoze. I can't seem
>to get the OS/2 version to install/run. I suspect newer JAVA is required. I
>have WARP 4 with the latest "free" Java I believe. Do I need Software
>Choice &/or ECS ? 
>Thanks for any help.

I've set it up and it works though I havent pushed it into production
so to speak. It does require Java v1.3 and up, you would be using
Java v1.8.1. JAVA v1.3 and up does require a SWC "or" eComStation
and/or eCSUP subscription.

Cheers
Ian B Manners

Microsoft "Tech Support":          
1) Re-boot           
2) Re-boot           
3) Re-install all your software           
4) Buy the new release (again)          
5) GOTO 1
----------------------------------------------------------------------------------

**= Email   2 ==========================**

Date:  Sun, 6 Oct 2002 06:40:27
From:  Voytek Eymont <voytek at sbt dot net dot au>
Subject:  Re: [os2genau] Jalbum ??

** Reply to note from "Ian Manners" <deadmail> Sat, 05 Oct 2002 01:57:32 +1000 (EST)

> >Is anyone using Jalbum under OS/2  (http://www.datadosen.se/jalbum/)

hmm, looks quite interesting.
though, I still think Stephane's rexx album is pretty cool

http://www.charette.dyn.tj/main_images.html

Voytek Eymont
SBT Information Systems Pty Ltd
http://www.sbt dot net dot au/links/
phone +61-2 9310-1144 fax +61-2 9310-1118 
Checked for Virus's by Asoft

----------------------------------------------------------------------------------

**= Email   3 ==========================**

Date:  Sat, 05 Oct 2002 11:01:23 +1000
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:  Re: [os2genau] Anyone want to have a go at this?

I read it as a shocked expression that someone would even mention
Windows !

- the double quotes being the eyes and the > indicating a head/nose
being being pulled back and up in shock.

Ed. 

Voytek Eymont wrote:
> 
> ** Reply to note from Kev Downes Tue, 16 Jul 2002 23:21:56 +0900
> 
> > >I received this at the bottom of an email I received from a
> friend.
> > >
> > >"> Windows
----------------------------------------------------------------------------------

**= Email   4 ==========================**

Date:  Sat, 05 Oct 2002 11:12:08 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] Anyone want to have a go at this?

Hi Ed

>I read it as a shocked expression that someone would even mention
>Windows !
>- the double quotes being the eyes and the > indicating a head/nose
>being being pulled back and up in shock.

You received the latest windows VIRUS, you are glad your not using
windows because its getting through a lot if not all virus scanners ;-)

It also didnt go to the list, ot went direct to you but modified the
headers to make you think it came from the list.

I've received 17 of these yesterday along, and only one
today from "Voytek", not really as thats what the headers
say but on digging further, it came from someone with a
Telstra Bigpond dot com address.

Nasty little bugger

Cheers
Ian B Manners

Ironic isn't it, that God gave the tortoise a drag factor of 0.03.
----------------------------------------------------------------------------------

**= Email   5 ==========================**

Date:  Sat, 05 Oct 2002 11:52:09 +0930
From:  Gregory Hicks <ghicks at ihug dot com dot au>
Subject:  Re: [os2genau] Anyone want to have a go at this?

Hi Ian,

My winsucks box browser (netscape) can't interpret the attachment, so it must he
hacking the header severely to prevent the recognition of the beast.

Ian Manners wrote:

> Hi Ed
>
> >I read it as a shocked expression that someone would even mention
> >Windows !
> >- the double quotes being the eyes and the > indicating a head/nose
> >being being pulled back and up in shock.
>
> You received the latest windows VIRUS, you are glad your not using
> windows because its getting through a lot if not all virus scanners ;-)
>
> It also didnt go to the list, ot went direct to you but modified the
> headers to make you think it came from the list.
>
> I've received 17 of these yesterday along, and only one
> today from "Voytek", not really as thats what the headers
> say but on digging further, it came from someone with a
> Telstra Bigpond dot com address.
>
> Nasty little bugger
>
> Cheers
> Ian B Manners
>
> Ironic isn't it, that God gave the tortoise a drag factor of 0.03.

>  

--

cheers

Gregory Hicks
Q48036388 3rd Year CQU BIT

"I took a bigger challenge - study externally and long distance"

[attachments have been removed]
----------------------------------------------------------------------------------

**= Email   6 ==========================**

Date:  Sat, 05 Oct 2002 12:35:51 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  [os2genau] Virus, was - Anyone want to have a go at this?

Hi Greg

>My winsucks box browser (netscape) can't interpret the attachment, so it must he
>hacking the header severely to prevent the recognition of the beast.

The mime type is mangled enough to hid it but to still be picked
up by Outlook due to its loose interpretation of mime standards.

I was thinking of adding it to my email filters but I have an interest
in virus and worms, I think I'd better as I dont want it getting that
slim chance combo and sending it out on one of my few hosted
email lists.

Cheers
Ian B Manners

127. Always try to be modest and be proud of it!
----------------------------------------------------------------------------------

**= Email   7 ==========================**

Date:  Sat, 05 Oct 2002 12:11:16 +0930
From:  Gregory Hicks <ghicks at ihug dot com dot au>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

What a clever little beast!!  Piggybacking in stealth and taking advantage
of the stupid gullibility of the M$ programmers idea of user friendly...

LOL

Ian Manners wrote:

> Hi Greg
>
> >My winsucks box browser (netscape) can't interpret the attachment, so it must he
> >hacking the header severely to prevent the recognition of the beast.
>
> The mime type is mangled enough to hid it but to still be picked
> up by Outlook due to its loose interpretation of mime standards.
>
> I was thinking of adding it to my email filters but I have an interest
> in virus and worms, I think I'd better as I dont want it getting that
> slim chance combo and sending it out on one of my few hosted
> email lists.
>
> Cheers
> Ian B Manners
>
> 127. Always try to be modest and be proud of it!

>  

--

cheers

Gregory Hicks
Q48036388 3rd Year CQU BIT

"I took a bigger challenge - study externally and long distance"

[attachments have been removed]
----------------------------------------------------------------------------------

**= Email   8 ==========================**

Date:  Sat, 05 Oct 2002 12:54:31 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

There are two very potent new worms out there that do not show
in all email clients that they are carrying attachments called

Tantos (BugBear)
http://www.viruslist dot com/eng/viruslist.html?id=52245

and

Opasoft (Worm.Win32.Opasoft)  (severe threat)
http://www.kaspersky dot com/news.html?id=961679

I've receive 15 BugBears and 2 Opasofts yesterday, 1Bugbears
and 5 Opasoft today and 3 more Opasoft's in the past 10-15 minutes.

Cheers
Ian B Manners

Sign at Norfolk farm gate:
     BEWARE! I SHOOT EVERY TENTH TRESPASSER
     AND THE NINTH ONE HAS JUST LEFT
----------------------------------------------------------------------------------

**= Email   9 ==========================**

Date:  05 Oct 2002 11:05:50 +0800
From:  bob <bob at fots dot org dot au>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

On Sat, 2002-10-05 at 10:35, Ian Manners wrote:
> I was thinking of adding it to my email filters but I have an interest
> in virus and worms, I think I'd better as I dont want it getting that
> slim chance combo and sending it out on one of my few hosted
> email lists.
> 
> Cheers
> Ian B Manners

Perhaps, to be safe, its time to filter all attachments with executable
extensions (including all the win - pif, scr etc - ones). Only allow non
executable attachments and if you absolutely _must_ attach an executable
zip it up (which would be better for bandwidth in any case).

Theres a util, written in Perl, that does this called mimedefang  
http://www.roaringpenguin dot com/mimedefang/ that may be suitable, or at
least able to be plundered for ideas so it can be rewritten in REXX as
God intended :).
 
-- 
bob
Cave canem...te necet lingendo.

----------------------------------------------------------------------------------

**= Email   10 ==========================**

Date:  Sat, 05 Oct 2002 09:27:58 +0900
From:  nickl at arach dot net dot au
Subject:  Re: [os2genau] Anyone want to have a go at this?

Hi All

FWIW I heard about a new virus called  "Air Bug" (sic) on the ABC NEWS
yesterday morning. It "appears" my ISP stopped it in it's tracks, so no
sample is availabe. According to the ABC, they reckon it only affects
Outlook Express,  but then, who knows.

Hope this helps.

Regards

NICK

In <200210051112.0000463N at server1.os2site dot com>, on 10/05/02 
   at 11:12 AM, "Ian Manners" <deadmail> said:

>Hi Ed

>>I read it as a shocked expression that someone would even mention
>>Windows !
>>- the double quotes being the eyes and the > indicating a head/nose
>>being being pulled back and up in shock.

>You received the latest windows VIRUS, you are glad your not using
>windows because its getting through a lot if not all virus scanners ;-)

>It also didnt go to the list, ot went direct to you but modified the
>headers to make you think it came from the list.

>I've received 17 of these yesterday along, and only one
>today from "Voytek", not really as thats what the headers
>say but on digging further, it came from someone with a
>Telstra Bigpond dot com address.

>Nasty little bugger

>Cheers
>Ian B Manners

>Ironic isn't it, that God gave the tortoise a drag factor of 0.03.

> 

-- 
-----------------------------------------------------------
nickl at arach dot net dot au
-----------------------------------------------------------

----------------------------------------------------------------------------------

**= Email   11 ==========================**

Date:  Sat, 05 Oct 2002 13:41:41 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

Hi Bob

>Perhaps, to be safe, its time to filter all attachments with executable
>extensions (including all the win - pif, scr etc - ones). Only allow non
>executable attachments and if you absolutely _must_ attach an executable
>zip it up (which would be better for bandwidth in any case).

All lists I host strip attachments except the JFS list for reasons
of distributing software so no virus attachments "should" get through
but with broken mime headers, anything is possible.

Got to like Tom's  "exploits at warp...." email address, raised my eyebrow
when I saw that in the logs but no virus/worms have been sent to the list,
so I've added the signatures to my weaselkill file anyway just to be on the
safe side. Anything with mime types of wav, midi and including attachments
ending in .scr are now dropped, not just stripped.

>Theres a util, written in Perl, that does this called mimedefang  
>http://www.roaringpenguin dot com/mimedefang/ that may be suitable, or at
>least able to be plundered for ideas so it can be rewritten in REXX as
>God intended :).

I've got similar scripts, though at present I'm using the native Major
Major mailing list "Drop Attachments" that Peter Moylan added.

Cheers
Ian B Manners

There has been opposition to every innovation in the history of man, with the
possible exception of the sword.
    	-- Benjamin Dana
----------------------------------------------------------------------------------

**= Email   12 ==========================**

Date:  05 Oct 2002 11:51:01 +0800
From:  bob <bob at fots dot org dot au>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

On Sat, 2002-10-05 at 11:41, Ian Manners wrote:

> I've got similar scripts, though at present I'm using the native Major
> Major mailing list "Drop Attachments" that Peter Moylan added.

That of course is the simplest and probably optimal solution. I thought
from the way you were talking in your previous post that you were
allowing some attachments, but you're right, this is better.

> Cheers
> Ian B Manners
> 

-- 
bob
Cave canem...te necet lingendo.

----------------------------------------------------------------------------------

**= Email   13 ==========================**

Date:  Sat, 5 Oct 2002 14:17:28
From:  Voytek Eymont <voytek at sbt dot net dot au>
Subject:  [os2genau] winclap Re: [os2genau] Anyone want to have a go at this?

** Reply to note from Gregory Hicks <ghicks at ihug dot com dot au> Sat, 05 Oct 2002 11:52:09 +0930

> > I've received 17 of these yesterday along, and only one 
> > today from "Voytek", not really as thats what the headers 
> > say but on digging further, it came from someone with a 
> > Telstra Bigpond dot com address.

ahem, have I started to send out windoze viruses to the list...?

I should've installed AV software, like every one else does..
sorry...

Ian, is there a voytek at  account on your server ?

Voytek Eymont
SBT Information Systems Pty Ltd
http://www.sbt dot net dot au/links/
phone +61-2 9310-1144 fax +61-2 9310-1118 
----------------------------------------------------------------------------------

**= Email   14 ==========================**

Date:  Sat, 5 Oct 2002 14:20:30
From:  Voytek Eymont <voytek at sbt dot net dot au>
Subject:  Re: [os2genau] Anyone want to have a go at this?

** Reply to note from Ed Durrant <edurrant at bigpond dot net dot au> Sat, 05 Oct 2002 11:01:23 +1000

> Voytek Eymont wrote:

no, he didn't

Voytek Eymont
SBT Information Systems Pty Ltd
http://www.sbt dot net dot au/links/
phone +61-2 9310-1144 fax +61-2 9310-1118 
----------------------------------------------------------------------------------

**= Email   15 ==========================**

Date:  Sat, 05 Oct 2002 14:27:01 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this?

Hi Voytek

>ahem, have I started to send out windoze viruses to the list...?

No, its not you, just said it was, these worms change the from
and reply to fields to one it picks out of an address book, html
or text file.

>I should've installed AV software, like every one else does..
>sorry...

I cant talk but then ignoring the AIX Box (anyone want to buy it?)
and the two Macs I'm 100% OS/2, no dos or windows boxes
(or WinOS2 or DOSOS2).

>Ian, is there a voytek at  account on your server ?

No, not for the email server, just for the os2genau list.

Cheers
Ian B Manners

.... Top secret! Burn before reading!
----------------------------------------------------------------------------------

**= Email   16 ==========================**

Date:  Sat, 05 Oct 2002 14:32:31 +0100
From:  Michael Taylor <miket at pcug dot org dot au>
Subject:  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this?

Ian Manners wrote:
> Hi Voytek
> I cant talk but then ignoring the AIX Box (anyone want to buy it?)

What model, memory etc? How much?

-- 
Regards,
Mick

--
-----------------------------------------------------------------------
     Michael Taylor                                 miket at pcug dot org dot au
    -----------------------------------------------------------------
              Home Page:  http://users.bigpond dot net dot au/miket5au
    -----------------------------------------------------------------

-----------------------------------------------------------------------

----------------------------------------------------------------------------------

**= Email   17 ==========================**

Date:  Sat, 05 Oct 2002 14:42:18 +1000 (EST)
From:  "Ian Manners" <deadmail>
Subject:  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this?

Hi Michael

>What model, memory etc? How much?

http://www dot comkal dot net/rs6000/index.html

The how much, depends, open to offers :-)

Cheers
Ian B Manners

The pen is the tongue of the mind.
----------------------------------------------------------------------------------

**= Email   18 ==========================**

Date:  Sat, 05 Oct 2002 14:39:53 +1000 (EST)
From:  "Daryl Pilkington" <u3232 at home.dialix dot com>
Subject:  Re: [os2genau] _digest] INTERNAL MODEM

Hi Nick,
Modems based on the Agere, (formerly Lucent), Venus chipset are
hardware modems.
This chip supports the following interfaces:
ISA
PCI
PCMCIA
USB
serial

So a modem manufacturer could make a modem for any of the above
interfaces using the same chipset.

ActionTec is a brand that uses this chipset & there are a few others.
Do a keyword search on Google for:
"lucent venus"

Winmodems sell for around $40AUS on the east-coast, whereas
Venus-chipset modems will sell for about $80AUS.

An external serial hardware modem will sell for about $85AUS.

On Fri, 04 Oct 2002 13:51:07 +0900, nickl at arach dot net dot au wrote:

>Hi All.
>
>I'm doing some research into the purchase of a new internal modem. My
>external modem is starting to slow a bit and may die anytime. My son (who
>should know better, but runs M$) uses an internal modem and blandly states
>that "....there are no internal modem that aren't Winmodems. Face it Dad,
>you have an outdated OS..."
>
SNIP
>

Regards,

Daryl  Pilkington 

//// The PC-Therapist, Business Computing Integration
O<O  AUSTRALIA
\_/
<O>  OS/2 Warp, Redhat Linux, DB2
     IBM Certified Systems Expert

        email: darylp at pc-therapist dot com dot au
          Mob: 0425-251-300

----------------------------------------------------------------------------------

**= Email   19 ==========================**

Date:  Sat, 05 Oct 2002 14:49:18 +1100 (EDT)
From:  "Gavin Miller" <drumextreme at impulse dot net dot au>
Subject:  Re: [os2genau] Virus, was - Anyone want to have a go at this?

Hi all,

yes I have been living under a rock :-)

What does this virus do and how do you know you have recieved it?

Cheers
G

----------------------------------------------------------------------------------

**= Email   20 ==========================**

Date:  Sat, 05 Oct 2002 16:21:54 +0100
From:  Michael Taylor <miket at pcug dot org dot au>
Subject:  Re: [os2genau] winclap Re: [os2genau] Anyone want to have a go at this?

Ian Manners wrote:
> Hi Michael
> 
> 
>>What model, memory etc? How much?
> 
> 
> http://www dot comkal dot net/rs6000/index.html
> 
> The how much, depends, open to offers :-)

That F50 is a serious bit of hardware. Much more than I was
looking for :-)

We upgraded one at work to an F80 recently so we could develop
64bit software. Cost $30,000 to buy the F50 (dual CPUs with 2x9G
disks and 256Mb RAM) and $30,000 to upgrade to the F80 with
512MB RAM. That was with the 45% develuper discount as well.

-- 
Regards,
Mick

--
-----------------------------------------------------------------------
     Michael Taylor                                 miket at pcug dot org dot au
    -----------------------------------------------------------------
              Home Page:  http://users.bigpond dot net dot au/miket5au
    -----------------------------------------------------------------

-----------------------------------------------------------------------

----------------------------------------------------------------------------------

**= Email   21 ==========================**

Date:  Sat, 05 Oct 2002 18:12:19 +1000
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:  Re: [os2genau] Anyone want to have a go at this?

VIRUS apparently Greg.

Ed.

Gregory Hicks wrote:
> 
> Hi Ian,
> 
> My winsucks box browser (netscape) can't interpret the attachment, so it must he
> hacking the header severely to prevent the recognition of the beast.
> 
> Ian Manners wrote:
> 
> > Hi Ed
> >
> > >I read it as a shocked expression that someone would even mention
> > >Windows !
> > >- the double quotes being the eyes and the > indicating a head/nose
> > >being being pulled back and up in shock.
> >
> > You received the latest windows VIRUS, you are glad your not using
> > windows because its getting through a lot if not all virus scanners ;-)
> >
> > It also didnt go to the list, ot went direct to you but modified the
> > headers to make you think it came from the list.
> >
> > I've received 17 of these yesterday along, and only one
> > today from "Voytek", not really as thats what the headers
> > say but on digging further, it came from someone with a
> > Telstra Bigpond dot com address.
> >
> > Nasty little bugger
> >
> > Cheers
> > Ian B Manners
> >
> > Ironic isn't it, that God gave the tortoise a drag factor of 0.03.
> 
> >  
> 
> 
> --
> 
> cheers
> 
> Gregory Hicks
> Q48036388 3rd Year CQU BIT
> 
> "I took a bigger challenge - study externally and long distance"
> 
> [attachments have been removed]

>  

----------------------------------------------------------------------------------