Fred, don't feel like the lone-stranger here. I'm mostly a lurker here, but
felt I should chime in on this one. This virus, if its the same one I recently
"acquired" is called W32/BadTrans@MM and comes via an email with an attachment
(either .scr or .pif). In addition to sending itself to everyone in your
address book, it also writes a "backdoor" trojan that somehow logs all your
keystrokes so that, presumably, someone could access the log via the internet
and thus acquire, for example, all your passwords. Most reports I've heard say
the emails looks like a reply to some other message you have sent someone.
There are a number of attachments that can come with it, with various names.
According to the info faq on this virus on Norton's web site, they only just
discovered this one on 24 Nov (the day I got it wouldn't you know). If you
have or had this virus, go to Nortons's Info sheet and look up the virus for
details on how to get rid of it (there's more to it than just isolating the
offending email). In addition to deleting the offending files, you may also
need to delete an entry in your Windows registry which this virus writes.
Unfortunately their faq sheet assumes you know how to edit your registry. If
anyone needs help in this regard, let me know.
Regards,
Cy
67 XKE, 78 Spitfire
http://www.britishcarforum.com
Original Message:
-----------------
From: Fred Thomas vafred@erols.com
Date: Wed, 28 Nov 2001 07:23:48 -0500
To: triumphs@autox.team.net, spitfires@autox.team.net,
british-cars@autox.team.net
Subject: virus long
Listers, first my sincerest apology for spreading of the virus to this list,
about 2 weeks ago someone posted about a new LBC calendar for sale, I
inquired as to price and received a reply, then on Monday morning I had
another e-mail from someone named Miller with the subject "calendar" with a
attachment, when I started to open it, my P/C advised against it, I went
ahead anyway, suddenly the attachment was a blank screen, I had no idea what
had happened to my P/C until Ken G. posted me I had sent him a virus, then a
2nd e-mail calling me a scum, I deleted all of my address book and then
bought a new Nortons Anti Virus 2002, which is in place now, again very
sorry for the many troubles I have caused, and I want each & everyone of you
to know I would never do anything in anyway to bring harm not only to this
list but to anyone period !!! Now begins the long journey of again filling
my address book with my needs. "FT"
--------------------------------------------------------------------
mail2web - Check your email from the web at
http://mail2web.com/ .
|