FORKNI-L
Digest - 4 May 2000 to 5 May 2000 (#2000-131)
Fri, 5 May 2000
There are 13 messages totalling 505 lines in this issue.
Topics of the day:
1. last names (2)
2. FEVER (2)
3. The Caddy (2)
4. ADMIN: Virus Alert
5. Andromoda Website up (Lisa Ryder alert) (5)
6. ADMIN: VIRUS ALERT
----------------------------------------------------------------------
Date: Sun, 4 May 1980 12:16:17 -0600
From: Angela Gottfred <agottfre@t.......>
Subject: last names
French-Canadian men in the period 1774-1821 were usually referred to by
their surname. Part of the reason for this was that "Jean-Baptiste" was a
_very_ popular first name, so just using the first name would lead to
confusion. Since certain surnames were also common, there was also a system
of nicknames ("dit" surnames--"dit" is French for "called"), so that you
could have Michel Belanger dit Yamaska (because he came from Yamaska) and
Michel Belanger dit Le Gros (because he was big).
In English, a crusader was someone who "follows the Cross". And what is
French for "the Cross"? "La Croix". Coincidence? Never!
Your humble & obedient servant,
Angela Gottfred
------------------------------
Date: Thu, 4 May 2000 15:00:32 -0700
From: Kyer <kyer@p.......>
Subject: Re: last names
Wrote Angela:> In English, a crusader was someone who "follows the Cross".
And what is> French for "the Cross"? "La Croix". Coincidence? Never!
Oh my.
You mean Lucien *purposely* named himself Lacroix just before nabbing Nick
precisely for our poor Crusader's benefit? That's terribly egotistical.
It must be the reason! ;)
He *did* tell Janette that Nick *would* come back to him. I always got a
kick out of fantasizing what Lacroix would have said to his daughter if Nick
*had* decided to forsake the Light. Would LC have shrugged it off or gone
into a hissy fit?
Grinned, ;)=
Kyer
kyer@p.......
------------------------------
Date: Thu, 4 May 2000 15:08:21 -0700
From: Kyer <kyer@p.......>
Subject: Re: FEVER
Portia wrote: My office is shutting down email b/c of an "I LOVE YOU" virus.
I haven't opened it, so my comp isn't infected but wanted to warn you all
about it. Obviously, don't open any msgs with the "I LOVE YOU" subject
heading.
It's not a hoax. And if you have Outlook like I do it will copy itself to
everyone in your address book. Don't click on attachments unless you really
trust the sender!
FK's Fever was a dream caused by Nick's eating too many tomatoed Nachos
before beddie bye.
Question. If a dog can become a carouche, what about an insect? I remember
a story with mosquitos..
Kyer
kyer@p.......
------------------------------
Date: Thu, 4 May 2000 15:45:13 -0700
From: "Kelly C. Smith" <tigrlady2u@j.......>
Subject: Re: The Caddy
I had a chance about a year ago to get a light blue 1962 convertible
caddy die-cast model, but I didn't. I said "I'll come back and get it,
later." When I went back, it was gone! The guy said he rarely sees
them, so he doubted he'd get another one in stock.
KC Smith~ who's still kicking herself for that brilliant move...
tigrlady2u@j.......
Nick/Natpacker with Dark Knightie tendencies.
"I've never met a chocolate I didn't like."
------------------------------
Date: Thu, 4 May 2000 21:31:22 -0500
From: Carla Martinek <copper6500@y.......>
Subject: ADMIN: Virus Alert
Posted with McLisa's permission
by Carla / copper6500@y.......
From http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
This is a brand new virus, just appearing yesterday. It's threat
assessment for damage is HIGH, and in the space of 24 hours has infected
hundreds of thousands of computers.
See the link for the actual text, and possible updates.
Your first line of defense is to ALWAYS HAVE VIRUS PREVENTION SOFTWARE
INSTALLED. If you do, immediately update your virus software (see your
software's homepage -- they probably have some sort of fix already in
place.)
REMEMBER:
1) DO NOT DOWNLOAD ATTACHMENTS unless you were specifically expecting
something from someone. This type of worm can send itself to everyone
in your address book, and appears to be a personal message from you to
them.
2) IF your mail program supports filters, set it to not download
anything from the server without your express permission (you musst
approve all attachments.)
Then set it so that anything with the subject "I love you" is deleted
without downloading.
***************************************************************
I always make it a point to forward virus warnings only if they have
reputable, checkable, sources. I ALWAYS include a respected anti-virus
web site, such as Symantec or McAfee. If you forward this message,
PLEASE RETAIN THE WEB LINK THAT'S INCLUDED!!!!!
From http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
*** NOTE ***
Most of the graphical links have been temporarily removed from this
writeup to reduce load time.
************
The Symantec AntiVirus Research center began receiving reports regarding
this worm early morning of May 4, 2000 GMT. This worm appears to
originate from the Manila, Phillipines. This worm has wide-spread
distribution and hundreds of thousands of machines are reported
infected. This worm sends itself out to email addresses in the Microsoft
Outlook address book and the worm also will spread itself via mIRC and
infect files on local and remote drives including files with the
extensions vbs, vbe, js, jse, css, wsh, sct, hta, jpg, jpeg, mp3, mp2
Also known as:
Category: Worm
Infection length: 10307
Virus definitions: May 4, 2000
Threat assessment:
Damage:
High Distribution:
High Wildness:
High
Wild
Number of infections: More than 1000 Number of sites: More than 10
Geographic distribution: High Threat containment: Difficult Removal:
Difficult
Damage
Payload:
Large scale e-mailing: Sends itself to addresses in the Microsoft
Outlook Address Book Degrades performance: May clog mail servers
Distribution
Subject of e-mail: ILOVEYOU Name of attachment:
LOVE-LETTER-FOR-YOU.TXT.vbs Size of attachment: 10307
Technical description:
When executed, the worm will copy itself to the Windows System directory
as MSKernel32.vbs, the Windows directory as Win32DLL.vbs, and the
Windows System directory as LOVE-LETTER-FOR-YOU.TXT.vbs
The worm checks if the file WinFAT32.exe exists in the Windows System
directory. If the file does not exist, the worm sets the Internet
Explorer Start Page to a website with the file WIN-BUGSFIX.exe. This
website is currently unreachable. The webpage has apparently been
shutdown, but this may be do to load on the webserver.
If the file does exist, the worm will create the following registry key
HKLM\Software\Microsoft\Windows\ CurrentVersion\Run\WIN-BUGSFIX
and execute the file on start up. The Internet Start Page will then be
replaced to a blank page.
For each drive including network drives, the virus will attempt to
infect files with VBS, and VBE extensions.
The worm will also search for files with the extensions JS, JSE, CSS,
WSH, SCT, HTA, JPG, JPEG, MP3, MP2 and create a file with the same name,
but with the extension VBS.
The worm will also spread via mIRC by creating a script.ini file in the
mIRC program directory which will send the dropped file
LOVE-LETTER-FOR-YOU.HTM to other users in the chatroom.
The worm uses MAPI calls to the Microsoft Outlook application and
creates messages by iterating through all the address in the Microsoft
Outlook Address Book. The worm will mark these receipients using the
registry in attempt to only send them the mail once.
The subject of the message is:
ILOVEYOU
The body of the message is:
kindly check the attached LOVELETTER coming from me.
Attached to the message is the file:
LOVE-LETTER-FOR-YOU.TXT.vbs
Finally, the virus will also drop the file LOVE-LETTER-FOR-YOU.HTM in
the Windows System directory, which is sent in conjuction with mIRC.
Removal:
1.Find and delete infected files
2.Remove the registry key
HKLM\Software\Microsoft\ Windows\CurrentVersion\ Run\WIN-BUGSFIX
3.Restore your Internet Explorer Start Page
From http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
------------------------------
Date: Thu, 4 May 2000 23:34:06 -0400
From: Emily Lacey <laceye@a.......>
Subject: Re: FEVER
>Question. If a dog can become a carouche, what about an insect? I remember
>a story with mosquitos..
I think that mosquitos come pre-vampired. At least around me they do...and
I'm sure Lacroix would be put out if their little legs got caught in his
teeth when he bit them...
Emily Lacey
laceye@a.......
------------------------------
Date: Fri, 5 May 2000 06:26:03 -0500
From: Tim Phillips <Timp@d.......>
Subject: Andromoda Website up (Lisa Ryder alert)
The website for Andromeda - a new television show from Gene
Roddenbury's company - just became available. Lisa Ryder is in a
starring role (unfortuantely, her bio doesn't list FK :-( )
http://www.andromedatv.com/cast.html
Tim Phillips
timp@d.......
------------------------------
Date: Fri, 5 May 2000 07:48:35 -0400
From: Cindy Clark <clarkcindy@e.......>
Subject: Re: The Caddy
From: <BJDFKFan@a.......>
> Any chance for a non-turquoise one? I've been looking in stores without luck
> for one in any color (I'll paint it the right color if I ever manage to find
> one!). I would love it if one is available or if they'd put one out!
Sorry Becky,
He hasn't even been able to find me one in a plastic kit. Some of my
friends do great work with the plastic model kits, rigging them up with
lights and sound chips and all kinds of gadgets. I've offered to paint one
if it's another color too. He's still looking, and I'm still bugging him
about it. If he finds one I'll post the info to the list for everyone to
take advantage of.
------------------------------
Date: Fri, 5 May 2000 07:06:58 -0500
From: Carla Martinek <copper6500@y.......>
Subject: ADMIN: VIRUS ALERT
I originally sent this Thursday night, but it doesn't appear to have
gone through.
Posted with McLisa's permission
by Carla / copper6500@y.......
DATA DELETING, PASSWORD STEALING, SELF-EMAILING WORM (VIRUS) WARNING
PLEASE READ CAREFULLY. Note the types of applications and files
affected, and also that new variants have already appeared as of Friday
morning.
If you forward this message, PLEASE RETAIN THE RESOURCES WEB LINKS THAT
ARE INCLUDED! NEVER forward virus alerts without including reputable
sources, as their lack often indicates a hoax.
RESOURCES:
Carnegie Mellon Software Enginnering Institute
http://www.cert.org/advisories/CA-2000-04.html
Symantec (Norton Utilities:
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
McAfee Virus Clinic
http://www.mcafee.com/viruses/loveletter/
OVERVIEW:
The Loveletter Worm can do the following:
* delete data on your hard drive
* attempt to find all stored passwords and send them to a particular email
* send itself to all the addresses in your Outlook address book
VARIANTS:
VVBS/LoveLetter.worm arrives via email message with one of three subject
lines:
"ILOVEYOU"
"Susitikim shi vakara kavos puodukui..."
"Joke"
DAMAGE ASSESSMENT: HIGH
Hundreds of thousands of computers infected within 24 hours.
data files overwritten
email/network systems overloaded and shut down
attempts to locate and steal your passwords
SOFTWARE AFFECTED (to date):
Microsoft Outlook
mIRC
Please visit http://www.cert.org/advisories/CA-2000-04.html for the best
description of the worm, and also for links to all of the major virus
software applications.
http://www.symantec.com/avcenter/venc/data/vbs.loveletter.a.html
contains a method of locating and removing the worm manually if you are
comfortable with getting into your system files.
Your first line of defense is to ALWAYS HAVE VIRUS PREVENTION SOFTWARE
INSTALLED. If you do, immediately update your virus software (see your
software's homepage -- they probably have some sort of fix already in
place.)
REMEMBER:
1) DO NOT DOWNLOAD ATTACHMENTS unless you were specifically expecting
something from someone. This type of worm can send itself to everyone
in your address book, and appears to be a personal message from you to
them.
2) IF your mail program supports filters, set it to not download
anything from the server without your express permission (you must
approve all attachments.) Then set it so that anything with the subjects
listed in the variant lists are deleted without downloading.
Please note that the sites listed above may be in heavy usage due to
this outbreak, and you may experience "Server Busy" errors, or extremely
long download times.
McAfee offers an online scanning option if you do not have antivirus
software currently installed.
Regards
Carla
copper6500@y.......
------------------------------
Date: Fri, 5 May 2000 13:05:49 EDT
From: Susankenn@a.......
Subject: Re: Andromoda Website up (Lisa Ryder alert)
Hi
I can't believe they didn't mention FK where she actually was on the opening
credits vs the guest shots she did in other shows.
Hard to believe
sue
susankenn@a.......
Knightie, NNpacker, UF
------------------------------
Date: Fri, 5 May 2000 10:53:25 -0700
From: Kyer <kyer@p.......>
Subject: Re: Andromoda Website up (Lisa Ryder alert)
> I can't believe they didn't mention FK where she actually was on the
opening credits vs the guest shots she did in other shows.
>
Is there some way we can...encourage them to correct this oversight?
:)=
Kyer, the hopelessly screwed up Squirette
Currently hiding at: kyer@p.......
Sponging off Lisa at: CotK site --
http://lavender.fortunecity.com/evildead/879/
Fighting with Homestead at: http://weirdknight2.homestead.com/index.html
and otherwise threatening to do evil things to Microsoft *and* Netscape!
------------------------------
Date: Fri, 5 May 2000 15:30:16 EDT
From: Libratsie@a.......
Subject: Re: Andromoda Website up (Lisa Ryder alert)
In a message dated 5/5/00 12:54:47 PM Central Daylight Time, kyer@p.......
writes:
> > I can't believe they didn't mention FK where she actually was on the
> opening credits vs the guest shots she did in other shows.
> >
>
> Is there some way we can...encourage them to correct this oversight?
Sometimes, it is the actor's agent or the actor themselves that for one
reason or another does not list something. The actor's appearance list might
also have been edited down to fit a space limitation. So please, I'd URGE
anyone that is contacting TPTB about such an "oversite" to be extremely
polite.
I know several actors who only list newer appearances, and some list
different appearances (on a rotation basis) every time such a list is
requested simply due to the large number of things they've appeared in.
--Libs
------------------------------
Date: Fri, 5 May 2000 16:23:42 EDT
From: Laudon1965@a.......
Subject: Re: Andromoda Website up (Lisa Ryder alert)
Just checked out the cast list. Kevin Sorbo is a major turnoff, but *Keith
Hamilton Cobb*!!!!! I may have to check this show out. As far as I'm
concerned Sorbo has all the chemistry of Wonderbread, but if they pair Ryder
with Cobb: lookout!. <g>
Laurie of the Isles
In a message dated 05/05/2000 3:22:32 AM US Mountain Standard Time,
Timp@d....... writes:
<< The website for Andromeda - a new television show from Gene
Roddenbury's company - just became available. Lisa Ryder is in a
starring role (unfortuantely, her bio doesn't list FK :-( )
http://www.andromedatv.com/cast.html >>
------------------------------
End of FORKNI-L Digest - 4 May 2000 to 5 May 2000 (#2000-131)
*************************************************************
Knight graphics and parchment background created by Melissa Snell and may be found at http://historymedren.about.com/
