Subject: NIMDA Virus

From: "Angel G. Polanco Rodriguez" <[email-masked]>
Date: Mon, 11 Mar 2002 07:12:14 -0600 (CST)

Hi all,

Somebody have any filter for to detect Nimda Virus across PINE? or some
form of detection (filter in pine)?.

Thanks a lot.

                   ************************************
                   |   ANGEL G. POLANCO RODRIGUEZ     |
                   | UNIVERSIDAD AUTONOMA DE YUCATAN  |
                   | DIRECCION      GENERAL        DE |
                   |      DESARROLLO ACADEMICO        |
                   | DEPARTAMENTO  DE  TELEINFORMATICA|
                   | CALLE 59 POR  AV.  ITZAEZ  # 490 |
                   | MERIDA,      YUCATAN,     MEXICO |
                   |      CODIGO POSTAL :  97 000     |
                   |     TELEFONO:52 (99)  23 74 28   |
                   |    E-mail: [email-masked]   |
                   |        http://www.uady.mx        |
                   ************************************

-- 
-----------------------------------------------------------------
 For information about this mailing list, and its archives, see: 
 http://www.washington.edu/pine/pine-info/
-----------------------------------------------------------------

---

From: Nancy McGough <[email-masked]>
Date: Mon, 11 Mar 2002 13:26:56 +0000 (GMT)

I discuss this on my Power Pine page in the section called
Avoiding Mislabeled Application Viruses such as Nimda and
Badtrans.B, which is here

 <http://www.ii.com/internet/messaging/pine/pc/#nimda>

And here's what the current incarnation of that section says:

One of the ways that the Nimda and BadTrans.B worms propagate is
as a MIME attachment that is an executable file but is mislabeled
as type audio/x-wave or audio/x-wav. I don't know if PC-Pine
users are vulnerable to mislabeled attachments, but to be sure
you aren't I suggest you add this to your mailcap file:

  audio/*;""

And then don't run any attachment that is labeled audio/x-wav(e)
by hand!

Details about mailcap and other security issues are on my Power
Pine page.

HTH,
Nancy
^x

-- 
ii Main Pine Page: <http://www.ii.com/internet/messaging/pine/>

Nancy McGough           <http://www.ii.com/>           Infinite Ink
--= Sent via Pine 4.44: IMAP, NNTP & ESMTP for Unix/Win/MacOS X =--