Subject: RE: Mac Attack
From: Jan Zumwalt (jwzumwalt@neatinfo.com)
Date: Wed Jan 29 2003 - 21:30:23 AKST
1) Get a good text/hex editor. They are usually called programmers editors.
Open the file and look at the hex code.
2) Most legitimate text programs at least put a version number and program
editor name in the first few bytes. If no version or editor name exists be
VARY wary.
3) Look at the hex code converted to ASCII. Most legitimate text programs
will have a bunch of gobbley gook at the beginning of the file (approx 1k
worth) then you should see mostly readable ASCII characters that make up the
body of the message.
4) If you don't see any of the above, I would ditch the file as a suspected
virus and/or mistake.
I will be at UAA Merrill field tomorrow and will try to remember to look you
up.
Jan Zumwalt
-----Original Message-----
From: aklug-bounce@aklug.org [mailto:aklug-bounce@aklug.org]On Behalf Of
Peter Q. Olsson
Sent: Wednesday, January 29, 2003 3:09 PM
To: aklug@aklug.org
Subject: Mac Attack
All-
I am having a Mac attack, and I don't mean fallen golden arches...
A (trusted) colleague sent me an attachment from a macintosh. this,
(apparently
text) file starts with the line:
(This file must be converted with BinHex 4.0)
and the rest is a jumble of text characters. my RH 7.0 box has a binhex
executable, but the accompanying man page suggests I should be starting with
a
MacBinary, and I end up with ??? something in hex? Doesn't seem like this
utility is useful...
I have run into this problem frequently with Mac users in what are supposed
to
be simple text attachments.
Any way, any ideas on how to crack this nut, or even what this file in
question
is exactly?
Fiends don't let fiends drive Macs....
PQO
__________________________________________________________________
| |
| Dr. Peter Q. Olsson, |
| Chief Scientist, Alaska Experimental Forecast Facility |
| University of Alaska Anchorage |
| 2811 Merrill Field Drive |
| Anchorage, AK 99501 |
| voice: (907) 264-7449 |
| fax : (907) 264-7444 |
| olsson@aeff.at.uaa.alaska.edu |
|__________________________________________________________________|
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
---------
To unsubscribe, send email to <aklug-request@aklug.org>
with 'unsubscribe' in the message body.
This archive was generated by hypermail 2a23 : Wed Jan 29 2003 - 21:30:45 AKST