PDA

View Full Version : Virus warning!!!!!!!!


Archive
11-26-2001, 03:45 PM
Posted By: <b>Lee Behrens</b><p>If any of you received an email from me with an attachment (bowl@rea-alp.com) DO NOT open it, it has a virus. I think I got it from an ebayer. The dumb thing send it out to everyone you had contact in the past with, and I know I have contacted some of you.<BR><BR>The attachment had 2 end a notepad, and a picture or something. I'm kind of illiterate in these matters.<BR><BR>Beware of any emails from ebayers with attachments, I am pretty sure I got it from one of them. I am pretty sure some of my contacts were sent it.<BR><BR>Sorry if it causes any problems, I am unsure of what it does. i will sent more info when I find out.<BR><BR>Lee

Archive
11-26-2001, 07:35 PM
Posted By: <b>Tom</b><p>but not from you. From another ebayer.......

Archive
11-27-2001, 03:25 AM
Posted By: <b>Lee Behrens</b><p>Here are some of the bad file locations:<BR><BR>WORM BADTRANS.B<BR><BR>WINDOWS/SYSTEM/KERNEL<BR>WINDOWS/SYSTEM/kdll.dll<BR>WINDOWS/Recycled/Dcl.scr<BR><BR>JS EXCEPTION.GEN<BR>2 files unsure what is after temp internet<BR><BR>WINDOWS/TemporaryInternet<BR><BR>I have not yet figured out how to get rid of them.<BR><BR>This really bites.

Archive
11-27-2001, 06:38 AM
Posted By: <b>runscott</b><p>Symantec is the best place to check for virus fixes - they have a detailed description and "removal instructions" for this one at: <a href="http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html" target=_new>http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html</a><BR>

Archive
11-27-2001, 11:55 AM
Posted By: <b>runscott</b><p>Here's the important thing to look for in attachments. Make sure your browser is configured to prompt before opening attachments. When prompted, look for the following - if found, cancel, then delete the e-mail and immediately empty your 'deleted' folder or 'recycle bin'.<BR><BR>In all cases, the worm will append two extensions. The first will be one of the following:<BR><BR>.doc<BR>.mp3<BR>.zip<BR><BR>The second extension that is appended to the file name is one of the following:<BR><BR>.pif<BR>.scr<BR>

Archive
11-27-2001, 02:37 PM
Posted By: <b>MW</b><p>Runscott is correct -- the questionable files will have two separate extentions. Some specific examples:<BR><BR>fun.mp3.pif<BR>readme.mp3.scr<BR><BR>McAfee offers a solution for detection and removal of this virus (W32/Badtrans@MM) at the following URL:<BR><BR><a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2608" target=_new>http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2608</a><BR><BR><a href="http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2608">Click here</a> to go there directly

Archive
11-27-2001, 04:07 PM
Posted By: <b>runscott</b><p>Another friend complained this afternoon about having the virus, so I sent him the site info - his response had a virus file attached! If you have the virus, do not send out emails until you have cleaned your machine - the virus attaches itself to outgoing emails (the subject won't help you determine if it's a virus email).

Archive
11-27-2001, 04:58 PM
Posted By: <b>MW</b><p>To all:<BR><BR>I would recommend against using your email service (sending email) until you are inoculated against this virus/worm.<BR><BR>Infected users are prone to a remote access trojan which allows the author of this virus/worm to access sensitive information on your computer (should you have any).<BR><BR>If you have opened an infected file and have received a message that reads, "Install error" or "File data corrupt: probably due to a bad data transmission or bad disk access" then DO NOT send any email until this virus/worm has been removed or the infected files have either been cleaned or deleted.<BR><BR>Most users have either McAfee or Symantec virus software installed on their computers. If your DAT files (virus definition files) have not been updated in the last month, you are susceptible to the W32/Badtras@MM virus. Use either of the links provided above (by me or runscott) to update these files and protect your computer.

Archive
11-27-2001, 10:10 PM
Posted By: <b>Lee Behrens</b><p>I had to go out in a snow storm to get my Norton Anti-Virus. But I am cured!!!<BR><BR>If only other illnesses were that easy.<BR><BR>Thanks for all the help from everyone!!!!!<BR><BR>Lee