Newsgroup: it.arti.musica.rock.progressive
Titolo: Virus? Semplice

Ma scusate, perché non andate su "Visualizza", selezionate "Layout",
guardate in basso e togliete la spuntatura "Visualizza riquadro di
anteprima"??!!! In questo modo avrete tutto il tempo di eliminare l'email
indesiderata.
Mo basta co sti consigli perň, ve sto a dě pure troppo, aň, ecche č!!!!
;o)))
H7-24

 ha scritto nel messaggio
news:9u8m7r$3pn$1...@nreadb.inwind.it...

Sei sicuro che funzioni...da quel che ho capito utilizza un baco di Outlook
e se ne frega che tu visualizzi il messaggio o no.
Ribadisco, il mio sistema č stra-patchato e ho l'ultimo aggiornamento di
Nav, quindi il virus non l'ho nemmeno visto; mi baso su articoli letti sui
siti Symantec e Microsoft.
Ho invece beccato un e-mail con W32.Magistr (dal mio band-mate Bramč, tra
l'altro!), ma Nav me l'ha catturato subito.
Ciao,
Massimo

 wrote in message
9u90au$s1$1...@pegasus.tiscalinet.it...

A me ha funzionato, senza fare tante peripezie in dos, ho eliminato
direttamente.
P.S. Attento quando fai l'update di Norton, un annetto fa ho dovuto
disinstallare il 2001 in quanto era stato preso di *mira*, e, oltre
all'aggiornamento mi uploadava anche degli script creati per infettare
win386...
Ciao

> Ho invece beccato un e-mail con W32.Magistr 
cazzo. quello sì che è bastardo. manda e-mail DA SOLO agli indirizzi
che trova. io ho dovuto formattare il pc perchè anche dopo aver
reinstallato windows mi apriva automaticamente un sacco di programmi.
non c'era verso. in strani doc.ditesto ho trovato questo:
 
DiViNE INTERVENTiON ]I[ (ZA Mirror)            :
http://home.pix.za/gk/prism/sites/divint
DiViNE INTERVENTiON ]I[ (GeoCities Mirror) :
http://www.geocities.com/SiliconValley/Way/2618
DiViNE INTERVENTiON ]I[ (DarkSide Mirror)  : http://
38.241.168.231/DiViNT
Pri$m's Domain: 
http://home.pix.za/gk/prism
Midnight BBS: 
http://www.websiteplus.com/midnight
   -= DiViNE INTERVENTiON ]I[ =-
     "You live for the fight when that's all that you've got."
                           User's Manual
     Please note that DiViNE INTERVENTiON ]I[ is provided for
  informational purposes ONLY. Pri$m will not be held responsible
  for any damage and \ or problems associated with or created by
                     DiViNE INTERVENTiON ]I[.
  Please also note that neither the name nor the motif of DiViNE
 INTERVENTiON ]I[, and the DiViNE INTERVENTiON series of programs
   generally, is meant to in any way refer to, associate with or
 offend any religion, belief or creed. Nowhere in the programs is
 there anything that points to any specific religion or belief. I
   have not yet received any complaints on this, but thought it
                     prudent to point it out.
  «We meet on the common ground of an uncommon Age, and share out
  our gifts of dark and light, good dream and bad, simple joy and
               not so simple sorrow.» - Ray Bradbury
 "Fly on, fight on, 'till the last drop of blood and gasoline." -
                       Manfred von Richtofen
Contents
·    Introduction
·    Official Distribution Sites
·    Using DiViNE INTERVENTiON ]I[
·    Obtaining an IP Address
·    Components
·    RETRiBUTiON
·    PLAGUEz
·    OMENz
·    INCANTATiONz
·    The Coding of DiViNE INTERVENTiON ]I[
·    Acknowledgements
·    Greetings
Introduction
                 "Weave a circle round him thrice,
               and close your eyes with holy dread,
                   for he on honey dew hath fed,
                 and drank the milk of paradise."
                    - Samuel Taylor Colleridge
DiViNE INTERVENTiON ]I[ is the latest in my series of DiViNE
INTERVENTiON war programs, and, at least for quite a while,
probably the last.
DiViNE ]I[ contains, in one single powerful packages, all the
weapons that I could manage to implement under Windows' Winsock
2.0 implementation. Although it may seem like a powerful package,
there are many weapons that could not be included because of
Winsock's restrictions, when compared to Linux's BSD socket
implementations.
The DiViNE INTERVENTiON series represents, however, a definite
step forward in the quality and design of underground programs.
Previously, programs such as these were not always well written,
were often bulky, badly designed, often with no documentation, and
just didn't look particularly good. With the DiViNE series, I have
attempted to merge not only the raw power of knowledge, but a good
and friendly design, a reasonable size, and proper documentation.
I hope, and expect, that from this point on underground coderz
will produce programs of a significantly higher quality. It is the
nature of software to improve markedly from version to version. My
challenge to other underground coders is simply this: compete, or
fade away.
As for DiViNE ]I[ being the last, this is for dual reasons.
Firstly, I can't think of much else that I could add to DiViNE
using Winsock. Secondly, this year I'm starting web authoring with
GRySTAL, and am starting work on an HTML editor. These projects
take preference because they are commercial, whereas underground
programming is merely a time-consuming hobby.
I would also like to comment on the apparently sadly lazy
attitudes of many underground web masters. I spend a lot of time
surfing around, and mailing these web authors, in an attempt to
get them to include my programs, or link me. Some never reply, and
of those that do, many take an extremely long time to even look at
my programs, if they do. It is in the interests of a web site to
stay up to date and current on the most powerful programs out -
and therefore in their interests to at least evaluate my software
quickly. I've authored four web sites for free, and of these, I
maintain three of them, keeping them up to date and making sure
they're working perfectly. I do this without getting paid - those
with advertising on their pages have significantly less excuse.
Please refrain from using DiViNE INTERVENTiON ]I[ indiscriminately
- especially the meaner portions of it. This program was never
intended for use in terrorizing the general public, and it is an
absolute certainty that frequent abuse of the weapons in it will
get you into trouble with your ISP.
The source code for DiViNE INTERVENTiON ]I[ is not freely
available, as was the case with DiViNE ][.  This is because the
weapons contained within it should not become commonly available -
they are available (I got them, didn't I?) but it takes a lot of
work, and energy, and understanding, which is precisely what it
should take. However, to corporations and companies seeking to
protect themselves and their clients against DiViNE ]I[, the
source code will be available for a cash payment of US $1000 -
however, for smaller companies, this is negotiable. There are
holes in the system, and they need to be fixed.
DiViNE INTERVENTiON ]I[, whether it represents (as I believe) a
significant milestone in the development and sophistication of war
programs or not, is definitely one of the, if not the, most
powerful programs of it's kind available on the planet. It
therefore deserves respect - respect in the sense that you do not
abuse it and the power and defiance that it provides, and respect
in that you do not mess with it in any way.
 - Pri$m.   (February 1998)
Official Distribution Sites
    "You don't need eyes to see, you need vision." - Faithless
The following sites are official distribution sites for both the
DiViNE series of war programs and all of Pri$m's underground
software:
DiViNE INTERVENTiON ]I[ (ZA Mirror)            :
http://home.pix.za/gk/prism/sites/divint
DiViNE INTERVENTiON ]I[ (GeoCities Mirror) :
http://www.geocities.com/SiliconValley/Way/2618
DiViNE INTERVENTiON ]I[ (DarkSide Mirror)  : http://
38.241.168.231/DiViNT
Pri$m's Domain: 
http://home.pix.za/gk/prism
Midnight BBS: 
http://www.websiteplus.com/midnight
Pri$m's Domain is Pri$m's personal web site. Should you wish to
contact him, the page will have both his email address and his ICQ
UIN.  The page contains all of his FileZ, Scrawlingz, a guided
tour of The Cave (otherwise known as his room), a Bio Profile, and
a collection of Linx to the far corners of the 'Net. And of course
you'd BETTER sign the guest book!
The Midnight BBS - A great page, H/P/A/C/V/Warez/Mail Bombers,
Message Board, Midi & Lyric of the Week, Chat, Java Games, Anti-Virus,
FTP, and More!  Drop by, it's in both English & French.
Using DiViNE INTERVENTiON ]I[
             "Do, or do not. There is no try." - Yoda
DiViNE INTERVENTiON ]I[ has been split into sections, where each
section groups together weapons with a common function. Please see
the heading specific for that section for information on using the
weapons contained within it.
DiViNE INTERVENTiON has been coded and designed to be pleasant and
easy to use, as well as aesthetically pleasing. If you find it
difficult to use or understand any part of this program, you
should think long and hard about whether you should be using it.
Should you not understand what a particular part of the program
does, hover your mouse cursor over it - be it an edit box, or a
button - and a hint will appear that should to some extent explain
what that particular component's function is.
Please note that to either hide or restore DiViNE's main window,
you can either double click on the Pri$m icon in the system tray,
or you can right click on that icon and choose either 'Restore' or
'Hide'. Also, if your copy is running, and you switch to another
window to do something, (eg get an IP), then you can bring the
DiViNE window back to the front either using ALT-TAB, or by left
clicking once on the icon in the system tray
Obtaining an IP Address
 "Therefore it can be said that victorious warriors win first, and
then go to battle, while defeated warriors go to battle first, and
           then seek to win." - Sun Tzu, the Art of War
Since most of the weapons in DiViNE INTERVENTiON ]I[ require a
target IP address, this section will attempt to explain what an IP
address is and how to get one.
An IP address is a unique number that identifies a machine on the
Internet. This number can be used to attempt to connect to that
machine. An IP address is usually entered in dot notation - for
example, 196.25.11.14. All machines on the same subnet should only
differ in the last number.
The most common places to obtain an IP address are IRC and ICQ. On
IRC, simply type "/dns <put their nick here>", and on ICQ, in the
User's Info section there is a Last IP Address field.
Sometimes, email headers may contain an IP address, but the
chances are that the user has since disconnected. Please note that
a user's IP address does NOT remain the same when they disconnect
and re-connect.
Components
     "Everything should be made as simple as possible, but not
                    simpler." - Albert Einstein
Your copy of DiViNE INTERVENTiON ]I[ should contain:
·    Divint3.exe (Program)
·    Divint.doc (User's Manual - this file)
·    Divhist.doc (The History of DiViNE INTERVENTiON)
·    Mlist.txt (Parsed text file containing mailing list names and
     addresses)
·    File_Id.diz (File ID information)
RETRiBUTiON
RETRiBUTiON is DiViNE INTERVENTiON ]I['s nuking section. It
includes two weapons used to nuke a user's machine or connection -
FyRE and BRiMSTONE. Note that an IRC nuker is also included in
INCANTATIONZ.
FyRE
FyRE is an OOB nuker. It exploits a bug in Windows 95 and NT that
causes them to throw a system exception when sent OOB (Out Of
Band) data via their NetBios ports (139 for Win95, 135 for WinNT).
Note that there is a patch for this.
A nuke can do anything from merely show a blue screen, to killing
connections, to forcing a reboot - the effects are determined by
the exact situation that the target machine is in when it is
nuked. You can use a port watcher - the most popular is Skream's -
to notify you when someone attempts to nuke you. However, it is a
far better idea to obtain the nuke patch - now available from the
DiViNE web sites (in the FAQ) which invalidates a port watcher.
OOB nuking has become so common that many users now have the patch
- and it has become a significantly less potent weapon than it was
when DiViNE ][ was released.
BRiMSTONE
BRiMSTONE is based almost entirely upon RhadWare's Click v2.2, and
    it's Visual C++ source code. It is, in essence, a slightly
                   simplified version of Click.

 win386...
Sono sempre un po' diffidente quando ci sono di mezzo queste procedure
automatiche tipo LiveUpdate o Windows Update, non si sa mai che cavolo fanno
e quali dati mandano...quindi in generale tendo a scaricare le definizioni
dei virus dal sito della Symantec senza utilizzare live update. Lo stesso
per le patch di Microsoft (anche perchč ora che arrivano sul Windows
Update!). Il tutto č motivato anche dal fatto che live update non permette
il resume se si blocca la conenssione, cosa probabilissima con una
connessione dial-up specialmente con Tiscali...quindi li scarico
direttamente con Getright...
Lo uso invece in ufficio visto che c'č un collegamento veloce...e poi se mi
modifica qualcosa e mi impalla il pc ho sempre una buona scusa per
"cazzeggiare" un po'!!! ;-))))
Anzi spero di trovarmi un bel BadTrans lunedě mattina! ;-))))
Ciao,
Massimo