Subject: [os2genau_digest] No. 1021
From: Digest <deadmail>
To: "OS/2GenAu Digest"<deadmail>
Date: Mon, 3 Jan 2005 00:01:07 EST-10EDT,10,-1,0,7200,3,-1,0,7200,3600

**************************************************
Sunday 02 January 2005
 Number  1021
**************************************************

Subjects for today
 
1  Re:  Broadband setup : Kev <kdownes at tpg dot com dot au>
2  Re:  Broadband setup : Ed Durrant <edurrant at bigpond dot net dot au>
3   [Fwd: Notice again] Is this a virus : Dennis Nolan <dennik at swiftdsl dot com dot au>
4  Re:  [Fwd: Notice again] Is this a virus : Dennis Nolan <dennik at swiftdsl dot com dot au>
5  Re:  [Fwd: Notice again] Is this a virus : Mike O'Connor <mikeoc at dodo dot com dot au>
6  Re:  [Fwd: Notice again] Is this a virus : Ian Manners" <deadmail>
7  Re:  [Fwd: Notice again] Is this a virus : Ian Manners" <deadmail>
8  Re:  [Fwd: Notice again] Is this a virus : Ed Durrant <edurrant at bigpond dot net dot au>
9  Re:  Broadband setup : Alan Duval" <amoht at ozemail dot com dot au>
10  Re:  Broadband setup : Ed Durrant <edurrant at bigpond dot net dot au>
11  Re:  Broadband setup : Mike O'Connor <mikeoc at dodo dot com dot au>
12  Re:  [Fwd: Notice again] Is this a virus : Voytek Eymont" <voytek at sbt dot net dot au>

**= Email   1 ==========================**

Date:  Sat, 01 Jan 2005 23:43:19 +0800
From:  Kev <kdownes at tpg dot com dot au>
Subject:  Re:  Broadband setup

Hi Ed

I did this recently.  I go a Billion BiPac 5100 ($90.00) router/modem/4 
port switch/firewall.  Did EXACTLY as outlined below, set up router via 
Mozilla and voila!!  It's that easy.  I should know coz I'm thick.

Don't hesitate.

Cheers
Kev

Ed Durrant wrote:
> Hi Alan,
> 
>   See if you can find out what equipment is being supplied. If this is ADSL, it may be a simple case of
> setting your OS/2 system to DHCP and resatrting and then accessing the router/modem to configure userid /
> password etc via a web browser !
> 
> Cheers/2
> 
> Ed.
> 
> Alan Duval wrote:
> 
> 
>>Hi,
>>
>>I know this subject has been discussed in the past but I had no intentioins of changing to broadband then.
>>However Ozemail is offering a good deal at present and  I am considering changing.
>>What's the procedure for setting up broadband in association with eCS1.1?
>>The service providers supply a setup disk for Windows but of course not for eCS.
>>
>>Also is there an archive of past discussions that can be searched?
>>
>>Regards
>>
>>Alan Duval
>>

>> 

> 
> 

>  

> 
> 
> 
----------------------------------------------------------------------------------

**= Email   2 ==========================**

Date:  Sun, 02 Jan 2005 08:25:16 +1100
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:  Re:  Broadband setup

Well Alan, If you get the same equipment (or similar) to Kev, it should be plain sailing !

Cheers/2

Ed.

Kev wrote:

> Hi Ed
>
> I did this recently.  I go a Billion BiPac 5100 ($90.00) router/modem/4
> port switch/firewall.  Did EXACTLY as outlined below, set up router via
> Mozilla and voila!!  It's that easy.  I should know coz I'm thick.
>
> Don't hesitate.
>
> Cheers
> Kev
>
> Ed Durrant wrote:
> > Hi Alan,
> >
> >   See if you can find out what equipment is being supplied. If this is ADSL, it may be a simple case of
> > setting your OS/2 system to DHCP and resatrting and then accessing the router/modem to configure userid /
> > password etc via a web browser !
> >
> > Cheers/2
> >
> > Ed.
> >
> > Alan Duval wrote:
> >
> >
> >>Hi,
> >>
> >>I know this subject has been discussed in the past but I had no intentioins of changing to broadband then.
> >>However Ozemail is offering a good deal at present and  I am considering changing.
> >>What's the procedure for setting up broadband in association with eCS1.1?
> >>The service providers supply a setup disk for Windows but of course not for eCS.
> >>
> >>Also is there an archive of past discussions that can be searched?
> >>
> >>Regards
> >>
> >>Alan Duval
> >>
> 
> >> 
> 
> >
> >
> 
> >  
> 
> >
> >
> >

>  

----------------------------------------------------------------------------------

**= Email   3 ==========================**

Date:  Sun, 02 Jan 2005 11:56:34 +1100
From:  Dennis Nolan <dennik at swiftdsl dot com dot au>
Subject:   [Fwd: Notice again] Is this a virus

I've just received the attached suspicious message.
Its attached file "Abuses.pif" seems to be a windows executable rather 
than an image file.
And as it is purportibly from then iPrimas news server, I thought one or 
two of the subscribers might be interested

Regards
Dennis.

[attachments have been removed]
----------------------------------------------------------------------------------

**= Email   4 ==========================**

Date:  Sun, 02 Jan 2005 12:14:02 +1100
From:  Dennis Nolan <dennik at swiftdsl dot com dot au>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Sorry about that, I forgot that attachments would be removed.

The message was From 415f9a5e 1 at news.iprimas dot com dot au
The Subject was Notice again
The Body was "Do not visit this illegal websites!"

And the attachment was titled "abuses.pif"

I had a look at the file and the magic number is "MZ"
At offset is "Windows Program"
It looks like it loads "KERNEL32.dll"
and calls LoadLibraryA
and GetProcAddress
 
Case closed

Once4 again
Regards
Dennis
 
Dennis Nolan wrote:

> I've just received the attached suspicious message.
> Its attached file "Abuses.pif" seems to be a windows executable rather 
> than an image file.
> And as it is purportibly from then iPrimas news server, I thought one 
> or two of the subscribers might be interested
>
> Regards
> Dennis.
>
> [attachments have been removed]
 
>
> 

>
>
----------------------------------------------------------------------------------

**= Email   5 ==========================**

Date:  Sun, 02 Jan 2005 12:43:20 +1000
From:  Mike O'Connor <mikeoc at dodo dot com dot au>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Dennis Nolan wrote:

> Sorry about that, I forgot that attachments would be removed.
>
> The message was From 415f9a5e 1 at news.iprimas dot com dot au
> The Subject was Notice again
> The Body was "Do not visit this illegal websites!"
>
> And the attachment was titled "abuses.pif"
>
> I had a look at the file and the magic number is "MZ"
> At offset is "Windows Program"
> It looks like it loads "KERNEL32.dll"
> and calls LoadLibraryA
> and GetProcAddress
>
> Case closed
>
> Once4 again
> Regards
> Dennis
>
> Dennis Nolan wrote:
>
>> I've just received the attached suspicious message.
>> Its attached file "Abuses.pif" seems to be a windows executable 
>> rather than an image file.
>> And as it is purportibly from then iPrimas news server, I thought one 
>> or two of the subscribers might be interested
>

Hi Dennis,

That's not the "iprimUs" that Ian works with/for!
Although that  .pif file would be useless winvirus/wintrojan etc.

-- 
Regards,
Mike

Failed the exam for
--------------------
MCSE - Minesweeper Consultant and Solitaire Expert
--------------------
[ISP blocks *.exe, *.cmd, * dot com, *.bat, *.reg attachments]
[Please use zipped versions of above]

----------------------------------------------------------------------------------

**= Email   6 ==========================**

Date:  Sun, 02 Jan 2005 14:18:11 +1100 (EDT)
From:  "Ian Manners" <deadmail>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Dear Dennis

Thank you for your e-mail. Virus are one of the biggest problems that many internet users face.

If you are not already aware, iPrimus has a Safe Surfing Guide that we recommend all users read, which is available via the link below.

http://www.iprimus dot com dot au/guide-dosanddonts.asp  

iPrimus also offers spam and anti-virus protection via our iProtect services.   For more information on this, please visit the link below.

http://www.iprimus dot com dot au/iProtect/

One of the most common methods of sending a virus is to put either one, or a number of legitimate looking names in the "TO" field, following by email address's in the "Bcc" field which you are unable to see.  This makes the e-mail appear to be more legitimate.

Virus writers are taking lessons from SPAMMer's, and in many cases they are now working together.

CC is an acronym for carbon copy. In order to multiply sending rates, messages composed by bulk mailers will often use a random multiple-recipient CC addressing feature where one message is sent to batches of addresses at a single time.

Bcc is an acronym for Blind carbon copy. The receiver of an email cannot see the email address's placed in the Bcc field, which is why it is called blind. In this case you will in all likelihood receive an email that appears to be addressed to someone else's email address, often in the same domain.

The basic upshot of this is that with 99.9% certainty, the virus you have received did not originate from were it states it came from.

If you are using Microsoft Outlook/Outlook Express, it is very difficult to access the true headers of the email to find out were it originated from.

Due to the high number of infected Microsoft Windows computers, it is also a very high resource intensive job to track down these users both from a financial point of view for the ISP concerned, and also the fact that many MS Windows users dont care that they are infected unless if starts causing them more than the normal amount of MS Windows problems.
This is way you will also find that ISP's do not try to track down infected MS Windows users, even if they are given accurate information in relation to the original email headers. 

The best advise we can give you to protect your computer is to ensure that you use a non Microsoft based operating system, or at least remove Outlook/Outlook Express and install a third party email client such as Mozilla ThunderBird.

If you have any further queries about our pricing, setup & installation options or contract period please refer to our web site or call us on 1300 85 48 48.  If replying via e-mail, please leave your original request included.  This is automatically done in most email programs.

Regards

Ian
iPrimus Internet
adslenquiry at iprimus dot com dot au
Tel: 1300 85 48 48
Fax: 1300 85 99 22

On Sun, 02 Jan 2005 11:56:34 +1100, Dennis Nolan wrote:

> I've just received the attached suspicious message.
> Its attached file "Abuses.pif" seems to be a windows executable rather 
> than an image file.
> And as it is purportibly from then iPrimas news server, I thought one or 
> two of the subscribers might be interested
> 
> Regards
> Dennis.
> 
> [attachments have been removed]

>  

Cheers
Ian Manners
http://www.os2site dot com/

"Strange women lying in ponds distributing swords is no basis for a system of government! Supreme executive power is derived by a mandate from the masses, not from some farcical aquatic ceremony!"
----------------------------------------------------------------------------------

**= Email   7 ==========================**

Date:  Sun, 02 Jan 2005 14:20:44 +1100 (EDT)
From:  "Ian Manners" <deadmail>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Oops

Excuse the spelling, just did that off the top of my head. Could have gone more
indepth but hey, its leisure time :)

Cheers
Ian Manners
http://www.os2site dot com/

****  Everyone is entitled to my opinion.  ****
----------------------------------------------------------------------------------

**= Email   8 ==========================**

Date:  Sun, 02 Jan 2005 16:31:16 +1100
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Hi Dennis,

  Posting to this newslist, detaches attachments on purpose.

  PIF files come from the old Windows 3.x days and are effectivly a start routine
(with dos settings) to run a program, so on a Windoze system, it WILL start something
running.

  I think you may be mixing up PIF with GIF ??

Cheers/2

Ed.

Dennis Nolan wrote:

> I've just received the attached suspicious message.
> Its attached file "Abuses.pif" seems to be a windows executable rather
> than an image file.
> And as it is purportibly from then iPrimas news server, I thought one or
> two of the subscribers might be interested
>
> Regards
> Dennis.
>
> [attachments have been removed]

>  

----------------------------------------------------------------------------------

**= Email   9 ==========================**

Date:  Sun, 02 Jan 2005 22:36:56 +1100 (AEDT)
From:  "Alan Duval" <amoht at ozemail dot com dot au>
Subject:  Re:  Broadband setup

On Sat, 01 Jan 2005 13:24:33 +1100, Ed Durrant wrote:

>Hi Alan,
>
>  See if you can find out what equipment is being supplied. If this is ADSL, it may be a simple case of
>setting your OS/2 system to DHCP and resatrting and then accessing the router/modem to configure userid /
>password etc via a web browser !
>

Hi Ed,

How do I set my system to DHCP ?
In the Internet folder  TCP/IP there are the folowing folders
DHCP Server Services
DHCP Monitor  
In the DHCP  Server Services folder there is a DHCP Server Management folder which when opened 
presents a GUI interface with buttons for
Statistics
Client Address/Pool
Delete
Status
Trace
Reinitialize
These allow insertion of Server, Administrator, Password, Intervals, Client ID, IP Address.
Is this where I set up my system to DHCP ?

I know practically nothing about DHCP and reading my OS/2 book doesn't enlighten me much.

Regards

Alan Duval

----------------------------------------------------------------------------------

**= Email   10 ==========================**

Date:  Sun, 02 Jan 2005 22:54:01 +1100
From:  Ed Durrant <edurrant at bigpond dot net dot au>
Subject:  Re:  Broadband setup

Alan Duval wrote:

> On Sat, 01 Jan 2005 13:24:33 +1100, Ed Durrant wrote:
>
> >Hi Alan,
> >
> >  See if you can find out what equipment is being supplied. If this is ADSL, it may be a simple case of
> >setting your OS/2 system to DHCP and resatrting and then accessing the router/modem to configure userid /
> >password etc via a web browser !
> >
>
> Hi Ed,
>
> How do I set my system to DHCP ?

 from the command line run TCPCFG2 and click on "Automatically using DHCP" rather than "manually using " on
the LAN interface you are using - usually LAN0.

Then reboot.

Cheers/2

Ed.

----------------------------------------------------------------------------------

**= Email   11 ==========================**

Date:  Sun, 02 Jan 2005 22:03:38 +1000
From:  Mike O'Connor <mikeoc at dodo dot com dot au>
Subject:  Re:  Broadband setup

Alan Duval wrote:

>On Sat, 01 Jan 2005 13:24:33 +1100, Ed Durrant wrote:
>
>>Hi Alan,
>>
>> See if you can find out what equipment is being supplied. If this is ADSL, it may be a simple case of setting your OS/2 system to DHCP and resatrting and then accessing the router/modem to configure userid / password etc via a web browser !
>>
>
>Hi Ed,
>
>How do I set my system to DHCP ?
>In the Internet folder  TCP/IP there are the folowing folders
>DHCP Server Services
>DHCP Monitor  
>In the DHCP  Server Services folder there is a DHCP Server Management folder which when opened 
>presents a GUI interface with buttons for
>Statistics
>Client Address/Pool
>Delete
>Status
>Trace
>Reinitialize
>These allow insertion of Server, Administrator, Password, Intervals, Client ID, IP Address.
>Is this where I set up my system to DHCP ?
>
>I know practically nothing about DHCP and reading my OS/2 book doesn't enlighten me much.
>  
>

Hi Alan,

Depending which version you're using you will probably have a different 
location for the icon TCP/IP configuration (local).
that actually runs the command "tcpcfg2.cmd", usually located in 
\tcpip\bin\.

Running that opens up the JAVA TCP/IP configuration Notebook.

On the very first page of that you will see on the right-hand panel 
selections to enable DHCP versus fixed IP addresses.

That is where you configure your use of DHCP. HELP will be active for 
any entry you want to know about there.

HTH

-- 
Regards,
Mike

Failed the exam for
--------------------
MCSE - Minesweeper Consultant and Solitaire Expert
--------------------
[ISP blocks *.exe, *.cmd, * dot com, *.bat, *.reg attachments]
[Please use zipped versions of above]

----------------------------------------------------------------------------------

**= Email   12 ==========================**

Date:  Sun, 2 Jan 2005 23:14:12 +1100 (EST)
From:  "Voytek Eymont" <voytek at sbt dot net dot au>
Subject:  Re:  [Fwd: Notice again] Is this a virus

Ian Manners said:
> Dear Dennis

> Thank you for your e-mail. Virus are one of the biggest problems that many
> internet users face.

MS windoze users face

-- 
Voytek
----------------------------------------------------------------------------------