ontolog-forum
[Top] [All Lists]

[ontolog-forum] Vol 13, Issue 21 Containes a VIRUS, IVY.exe..W32.Beagle

To: <ontolog-forum@xxxxxxxxxxxxxxxx>
From: "Cecelia Hickel" <cecelia.hickel@xxxxxxxxxxx>
Date: Tue, 20 Jan 2004 23:45:03 -0800
Message-id: <NFBBKABMKLPIFMHCCAKIIEMNPHAB.cecelia.hickel@xxxxxxxxxxx>
I received this message Volume 13, Issue 21 and it was found to be infected
with the W32.Beagle.A@mm virus. File called ivy.exe. My virus scan program
picked it off and cleaned it up. For those who have opened this file, have
no virus scan program, are otherwise not ware    (01)

-----Original Message-----
From: ontolog-forum-bounces@xxxxxxxxxxxxxxxx
[mailto:ontolog-forum-bounces@xxxxxxxxxxxxxxxx]On Behalf Of
ontolog-forum-request@xxxxxxxxxxxxxxxx
Sent: Monday, January 19, 2004 7:44 AM
To: ontolog-forum@xxxxxxxxxxxxxxxx
Subject: ontolog-forum Digest, Vol 13, Issue 21    (02)


Send ontolog-forum mailing list submissions to
        ontolog-forum@xxxxxxxxxxxxxxxx    (03)

To subscribe or unsubscribe via the World Wide Web, visit
        http://ontolog.cim3.net/mailman/listinfo/ontolog-forum
or, via email, send a message with subject or body 'help' to
        ontolog-forum-request@xxxxxxxxxxxxxxxx    (04)

You can reach the person managing the list at
        ontolog-forum-owner@xxxxxxxxxxxxxxxx    (05)

When replying, please edit your Subject line so it is more specific
than "Re: Contents of ontolog-forum digest..."    (06)


Today's Topics:    (07)

   1. Hi
   2. Re: Hi (Douglas McDavid)    (08)


----------------------------------------------------------------------    (09)

Date: Mon, 19 Jan 2004 16:36:56 +0530
From: yimpp@xxxxxxxxxxx
To: ontolog-forum@xxxxxxxxxxxxxxxx
Subject: [ontolog-forum] Hi
Message-ID: <phmaackdqcphifxsbxc@xxxxxxxxxxx>
Content-Type: multipart/mixed;
        boundary="--------528784734116733"
MIME-Version: 1.0
Precedence: list
Reply-To: "\[ontolog-forum\] " <ontolog-forum@xxxxxxxxxxxxxxxx>
Message: 1    (010)

----------528784734116733
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit    (011)

 Test =)
ccrhavadhdgettbo
--
Test, yep.    (012)

----------528784734116733
Content-Type: plain/text;
        name="Norton AntiVirus Deleted1.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Norton AntiVirus Deleted1.txt"    (013)

Tm9ydG9uIEFudGlWaXJ1cyByZW1vdmVkIHRoZSBhdHRhY2htZW50OiBpdnkuZXhlLg0KVGhl
IGF0dGFjaG1lbnQgd2FzIGluZmVjdGVkIHdpdGggdGhlIFczMi5CZWFnbGUuQUBtbSB2aXJ1
cy4=
----------528784734116733--    (014)

------------------------------    (015)

Date: Mon, 19 Jan 2004 07:43:37 -0800
From: Douglas McDavid <mcdavid@xxxxxxxxxx>
To: "[ontolog-forum] " <ontolog-forum@xxxxxxxxxxxxxxxx>
Subject: Re: [ontolog-forum] Hi
Message-ID:
<OF4DB6B0BE.1D6B77C7-ON88256E20.00565755-88256E20.00566265@xxxxxxxxxx>
In-Reply-To: <phmaackdqcphifxsbxc@xxxxxxxxxxx>
Content-Type: multipart/related;
        Boundary="0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5"
MIME-Version: 1.0
Precedence: list
Reply-To: "\[ontolog-forum\] " <ontolog-forum@xxxxxxxxxxxxxxxx>
Message: 2    (016)

--0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: multipart/alternative;
        Boundary="1__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5"    (017)

--1__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: text/plain; charset=US-ASCII
Content-transfer-encoding: quoted-printable    (018)






Ouch!  See below.    (019)


Doug McDavid    (020)

Almaden Services Research
IBM Academy of Technology - http://www-306.ibm.com/ibm/academy/index.ht=
ml
mcdavid@xxxxxxxxxx
408-927-1565 (IBM tie-line: 457)
ASR     - http://www.almaden.ibm.com/asr/
                 http://www.almaden.ibm.com/coevolution/
BASIS - http://www.research.ibm.com/basis/
ODIS   - http://www.research.ibm.com/odis    (021)




                                                                       =    (022)

                      yimpp@xxxxxxxxxxx                                =    (023)

                      Sent by:                           To:       onto=
log-forum@xxxxxxxxxxxxxxxx
                      ontolog-forum-bounces@ontol        cc:           =    (024)

                      og.cim3.net                        Subject:  [ont=
olog-forum] Hi
                                                                       =    (025)

                                                                       =    (026)

                      01/19/2004 03:06 AM                              =    (027)

                      Please respond to                                =    (028)

                      "[ontolog-forum] "                               =    (029)

                                                                       =    (030)





 Test =3D)
ccrhavadhdgettbo
--
Test, yep.    (031)


ivy.exe is removed from here because it contains a virus.
_________________________________________________________________
Message Archives: http://ontolog.cim3.net/forum/ontolog-forum/
Subscribe/Unsubscribe/Config:
http://ontolog.cim3.net/mailman/listinfo/ontolog-forum/
Shared Files: http://ontolog.cim3.net/file/
Community Wiki: http://ontolog.cim3.net/wiki/
To Post: mailto:ontolog-forum@xxxxxxxxxxxxxxxx    (032)


Found virus WORM_BAGLE.A in file ivy.exe
The file is deleted.    (033)

IBM's antivirus detection system has identified a virus in an attachmen=
t to
this e-mail.  The attachment has been deleted.  No further reporting or=    (034)

action is required on your part.  THIS EMAIL IS NOW SAFE TO OPEN.  Visi=
t
w3.ibm.com/virus for more information.    (035)

=    (036)

--1__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: text/html; charset=US-ASCII
Content-Disposition: inline
Content-transfer-encoding: quoted-printable    (037)

<html><body>
<p>Ouch!  See below.<br>
<br>
<br>
Doug McDavid<br>
<br>
Almaden Services Research <br>
IBM Academy of Technology - <a href=3D"http://www-306.ibm.com/ibm/acade=
my/index.html">http://www-306.ibm.com/ibm/academy/index.html</a><br>
mcdavid@xxxxxxxxxx<br>
408-927-1565 (IBM tie-line: 457)<br>
ASR     - <a href=3D"http://www.almaden.ibm.com/asr/";>http://www.almade=
n.ibm.com/asr/</a><br>
                 <a href=3D"http://www.almaden.ibm.com/coevolution/";>ht=
tp://www.almaden.ibm.com/coevolution/</a><br>
BASIS - <a href=3D"http://www.research.ibm.com/basis/";>http://www.resea=
rch.ibm.com/basis/</a><br>
ODIS   - <a href=3D"http://www.research.ibm.com/odis";>http://www.resear=
ch.ibm.com/odis</a><br>
<br>
<br>
<img src=3D"cid:10__=3D07BBE4B3DFC5D1C58f9e8a93df938@us.ibm.com"; width=3D=
"16" height=3D"16" alt=3D"Inactive hide details for yimpp@xxxxxxxxxxx">=
yimpp@xxxxxxxxxxx<br>
<br>
<br>    (038)

<table V5DOTBL=3Dtrue width=3D"100%" border=3D"0" cellspacing=3D"0" cel=
lpadding=3D"0">
<tr valign=3D"top"><td width=3D"1%"><img src=3D"cid:20__=3D07BBE4B3DFC5=
D1C58f9e8a93df938@xxxxxxxxxx" border=3D"0" height=3D"1" width=3D"72" al=
t=3D""><br>
</td><td style=3D"background-image:url(cid:30__=3D07BBE4B3DFC5D1C58f9e8=
a93df938@xxxxxxxxxx); background-repeat: no-repeat; " width=3D"1%"><img=
 src=3D"cid:20__=3D07BBE4B3DFC5D1C58f9e8a93df938@us.ibm.com"; border=3D"=
0" height=3D"1" width=3D"225" alt=3D""><br>    (039)

<ul>
<ul>
<ul>
<ul><b><font size=3D"2">yimpp@xxxxxxxxxxx</font></b><br>
<font size=3D"2">Sent by: ontolog-forum-bounces@xxxxxxxxxxxxxxxx</font>=    (040)

<p><font size=3D"2">01/19/2004 03:06 AM</font><br>
<font size=3D"2">Please respond to &quot;[ontolog-forum] &quot;</font><=
/ul>
</ul>
</ul>
</ul>
</td><td width=3D"100%"><img src=3D"cid:20__=3D07BBE4B3DFC5D1C58f9e8a93=
df938@xxxxxxxxxx" border=3D"0" height=3D"1" width=3D"1" alt=3D""><br>
<font size=3D"1" face=3D"Arial">        </font><br>
<font size=3D"2">       To:     </font><font 
size=3D"2">ontolog-forum@xxxxxxxxxxx=
3.net</font><br>
<font size=3D"2">       cc:     </font><br>
<font size=3D"2">       Subject:        </font><font size=3D"2">[ontolog-forum] 
Hi</=
font></td></tr>
</table>
<br>
<br>
<tt> Test =3D)<br>
ccrhavadhdgettbo<br>
--<br>
Test, yep.<br>
<br>
<br>
ivy.exe is removed from here because it contains a virus.<br>
_________________________________________________________________<br>
Message Archives: </tt><tt><a href=3D"http://ontolog.cim3.net/forum/ont=
olog-forum/">http://ontolog.cim3.net/forum/ontolog-forum/</a></tt><tt><=
br>
Subscribe/Unsubscribe/Config: </tt><tt><a href=3D"http://ontolog.cim3.n=
et/mailman/listinfo/ontolog-forum/">http://ontolog.cim3.net/mailman/lis=
tinfo/ontolog-forum/</a></tt><tt><br>
Shared Files: </tt><tt><a href=3D"http://ontolog.cim3.net/file/";>http:/=
/ontolog.cim3.net/file/</a></tt><tt><br>
Community Wiki: </tt><tt><a href=3D"http://ontolog.cim3.net/wiki/";>http=
://ontolog.cim3.net/wiki/</a></tt><tt>&nbsp;<br>
To Post: </tt><tt><a href=3D"mailto:ontolog-forum@xxxxxxxxxxxxxxxx">mai=
lto:ontolog-forum@xxxxxxxxxxxxxxxx</a></tt><tt><br>
 <br>
<br>
Found virus WORM_BAGLE.A in file ivy.exe<br>
The file is deleted.<br>
<br>
IBM's antivirus detection system has identified a virus in an attachmen=
t to this e-mail. &nbsp;The attachment has been deleted. &nbsp;No furth=
er reporting or action is required on your part. &nbsp;THIS EMAIL IS NO=
W SAFE TO OPEN. &nbsp;Visit w3.ibm.com/virus for more information.<br>
<br>
</tt>    (041)

</body></html>=    (042)


--1__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5--    (043)


--0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: image/gif;
        name="graycol.gif"
Content-Disposition: inline; filename="graycol.gif"
Content-ID: <10__=07BBE4B3DFC5D1C58f9e8a93df938@xxxxxxxxxx>
Content-transfer-encoding: base64    (044)

R0lGODlhEAAQAKECAMzMzAAAAP///wAAACH5BAEAAAIALAAAAAAQABAAAAIXlI+py+0PopwxUbpu
ZRfKZ2zgSJbmSRYAIf4fT3B0aW1pemVkIGJ5IFVsZWFkIFNtYXJ0U2F2ZXIhAAA7    (045)

--0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: image/gif;
        name="ecblank.gif"
Content-Disposition: inline; filename="ecblank.gif"
Content-ID: <20__=07BBE4B3DFC5D1C58f9e8a93df938@xxxxxxxxxx>
Content-transfer-encoding: base64    (046)

R0lGODlhEAABAIAAAAAAAP///yH5BAEAAAEALAAAAAAQAAEAAAIEjI8ZBQA7    (047)

--0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5
Content-type: image/gif;
        name="pic03573.gif"
Content-Disposition: inline; filename="pic03573.gif"
Content-ID: <30__=07BBE4B3DFC5D1C58f9e8a93df938@xxxxxxxxxx>
Content-transfer-encoding: base64    (048)

R0lGODlhWABDALP/AAAAAK04Qf79/o+Gm7WuwlNObwoJFCsoSMDAwGFsmIuezf///wAAAAAAAAAA
AAAAACH5BAEAAAgALAAAAABYAEMAQAT/EMlJq704682770RiFMRinqggEUNSHIchG0BCfHhOjAuh
EDeUqTASLCbBhQrhG7xis2j0lssNDopE4jfIJhDaggI8YB1sZeZgLVA9YVCpnGagVjV171aRVrYR
RghXcAGFhoUETwYxcXNyADJ3GlcSKGAwLwllVC1vjIUHBWsFilKQdI8GA5IcpApeJQt8L09lmgkH
LZikoU5wjqcyAMMFrJIDPAKvCFletKSev1HBw8KrxtjZ2tvc3d5VyKtCKW3jfz4uMKmq3xu4N0nK
BVoJQmx2LGVOmrqNjjJf2hHAQo/eDwJGTKhQMcgQEEAnEjFS98+RnW3smGkZU6ncCWav/4wYOnAI
TihRL/4FEwbp28BXMMcoscQCVxlepL4IGDSCyJyVQOu0o7CjmLN50OZlqWmyFy5/6yBBuji0AxFR
M00oQAqNIstqI6qKHUsWRAEAvagsmfUEAImyxgbmUpJk3IklNUtJOUAVLoUr1+wqDGTE4zk+T6FG
uQb3SizBCwatiiUgCBN8vrz+zFjVyQ8FWkOlg4NQiZMB5QS8QO3mpOaKnL0Z2EKvNMSILEThKhCg
zMKPVxYJh23qm9KNW7pArPynMqZDiErsTMqI+LRi3QAgkFUbXpuFKhSYZALd0O5RKa2z9EYKBbpb
qxIKsjUPRgD7I2XYV6wyrOw92ykExP8NW4URhknC5dKGE4v4NENQj2jXjmfNgOZDaXb5glRmXQ33
YEWQYNcZFnrYcIQLNzyTFDQNkXIff0ExVlY4srziQk43inZgL4rwxxINMvpFFAz1KOODHiu+4aEw
NEjFl5B3JIKWKF3k6I9bfUGp5ZZcdunll5IA4cuHvQQJ5gcsoCWOOUwgltIwAKRxJgbIkJAQZEq0
2YliZnpZZ4BH3CnYOXldOUOfQoYDqF1LFHbXCrO8xmRsfoXDXJ6ChjCAH3QlhJcT6VWE6FCkfCco
CgrMFsROrIEX3o2whVjWDjoJccN3LdggSGXLCdLEgHr1lyU3O3QxhgohNKXJCWv8JQr/PDdaqd6w
2rj1inLiGeiCJoDspAoQlYE6QWLSECehcWIYxIQES6zhbn1iImTHEQyqJ4eIxJJoUBc+3CbBuwZE
V5cJPPkIjFDdeEabQbd6WgICTxiiz0f5dBKquXF6k4senwEhYGnKEFJeGrxUZy8dB8gmAXI/sPvH
ESfCwVt5hTgYiqQqtdRNHQIU1PJ33ZqmzgE90OwLaoJcnMop1WiMmgkPHQRIrwgFuNV90A3doNKT
mrKIN07AnGcI9BQjhCBN4RfA1qIZnMqorJCogKfGQnxSCDilTVIA0yl5ciTovgLuBDKFUDE9aQcw
9SA+rjSNf9/M1gxrj6VwDTS0IUSElMzBfsj0NFXR2kwsV1A5IF1grLgLL/r1R40BZEnuBWgmQEyb
jqRwSAt6bqMCOFkvKFN2GPPkUzIm/SCF8z8pVzpbjVnMsy0vOr1hw3SaSRUhpY09v0z0J1FnwzPl
fmh+xl4WtR0zGu24I4KbMQm3lnVu2oNWxI9W/lcyzA+mCKF4DBikxb/+UWtOGRiFP8qEwAayIgIA
Ow==    (049)

--0__=07BBE4B3DFC5D1C58f9e8a93df938690918c07BBE4B3DFC5D1C5--    (050)

------------------------------    (051)

_________________________________________________________________
Message Archives: http://ontolog.cim3.net/forum/ontolog-forum/
Subscribe/Unsubscribe/Config:
http://ontolog.cim3.net/mailman/listinfo/ontolog-forum/
Shared Files: http://ontolog.cim3.net/file/
Community Wiki: http://ontolog.cim3.net/wiki/  To Post:
mailto:ontolog-forum@xxxxxxxxxxxxxxxx    (052)


End of ontolog-forum Digest, Vol 13, Issue 21
*********************************************    (053)


_________________________________________________________________
Message Archives: http://ontolog.cim3.net/forum/ontolog-forum/
Subscribe/Unsubscribe/Config: 
http://ontolog.cim3.net/mailman/listinfo/ontolog-forum/
Shared Files: http://ontolog.cim3.net/file/
Community Wiki: http://ontolog.cim3.net/wiki/ 
To Post: mailto:ontolog-forum@xxxxxxxxxxxxxxxx    (054)

<Prev in Thread] Current Thread [Next in Thread>
  • [ontolog-forum] Vol 13, Issue 21 Containes a VIRUS, IVY.exe..W32.Beagle.A@mm. See this NOTE, This reply has been cleaned by Norton Anti-virus., Cecelia Hickel <=