Karen (Pisel on chat) asked me to post a warning and apology, that she has a virus or worm ....that is sending itself out to all on her Address List....if you get someting DON'T OPEN IT!
Thinks that it came by way of OZ ...Email from Bushie....Jon check yer puter!
Posted by Samazon (Member # 408) on :
Thank you for posting this, Si - I was just about to post it!
I've emailed Karen and deleted the file.
Sam
Posted by AdrienneMorgan (Member # 1046) on :
Ah ha!! I saw it tonight, it wanted to download something, looked suspicious, so I trashed it. Thanks for the heads up. A Posted by Jon Butterworth (Member # 227) on :
Yep .. sorry folks .. I got Zapped this morning with a worm!!!!!
Nothing I could do about it as it downloaded when I tried to delete the suspect message from an unknown person.
its called W32.Badtrans.B@mm
The message subject came as Re: with no text only a file attachment which I didn't open.
My Norton was updated last month and didn't find it. An update tonight found two System files infected with it which I have isolated and will be contacting my ISP in the morning for a fix. I can't e-mail anything at the moment ... so you are all safe
I will post the fix as soon as possible
Sorry again
Posted by Karen Stein (Member # 241) on :
A BIG thanks to Si for posting the warning last night. And apologies (yeah I know, it couldn't be helped and I didn't do it on purpose) but I want you all to know (who are in my address book) that I still feel bad that it happened at all. What a pain in the butt that was. I'm 'clean' again, and well armed with updated Norton. At least most all of you are computer savy enough to suspect what was happening....I'm afraid that some of my family members might not be (and just at a time before Christmas when I was trying to make an extra good impression amoungst them )I spent alot of time calling people last night to warn them that they shouldn't open anything from me and I probably still missed alot oh well. A BIG thanks to all on chat who held my hand thru the trauma of clean-up last night...what a great bunch of heplful people (when they weren't calling me typhoid annie )
Jon, the worm came from from your puter, so it did manage to send some out already. there were three files on mine that were 'created'. 2 are located in the windows system files: kern32.exe and hksdll.dll for a great description and info on this nasty little bugger, visit www.datafellows.com and look for the Badtrans name (thanks Stickerpimp...great site) Ok, time for some work!
Posted by AdrienneMorgan (Member # 1046) on :
Yup, I just got it (but my grisoft virus checker caught it) from Steve Barba.
Update your virus checkers folks. Adrienne
Posted by Steve Barba (Member # 431) on :
Yep- I'm a bad man! I didnt catch it in time- BUT- all fixed now,(took all morning).
I had 2 actually- Badtrans, and annoying worm virus.
Posted by Jon Butterworth (Member # 227) on :
Mine's fixed now too ... thanks for the help.
I also patched Outlook Express so things like this can't automatic download
As an added precaution ... I have deleted all my e-mail address files after making a print copy. That way, if it happens again, at least I won't spread it before I can fix it.
Posted by Santo (Member # 411) on :
Yep, I got the note from Steve Barba, too. The dead give away was it was a reply from a e-mail several months ago with no message. Norton did it again!!
Posted by Si Allen (Member # 420) on :
Don't go punishing yourself, Jon! It's happened to most of us...until we got Norton, McAfee, or other anti-virus program!
The trick ios to continually update the program to catch any new virus or worm.
Posted by Del Badry (Member # 114) on :
the computer i d/l the email from Steve doesnt have virus protection, but it seemed odd, that when i went to look at the email, it wanted to d/l the attachment, without me askin to that.....
Posted by bronzeo (Member # 1408) on :
I have posted this before, but as a reminder and for those that haven't seen it:..... a cut and paste
To avoid spreading computer viruses, create a contact in your email
> address book with the name: !0000 with no email address in the details. > This contact will then show up as your first contact. If a virus attempts to > > do a "send all" on your contact list, your PC will put up an error message > saying that: > > "The Message could not be sent. One or more recipients do not have > an e-mail address. Please check your Address Book and make sure all the > recipients have a valid e-mail address." > > You click on OK and the offending (virus) message would not have been > sent to anyone. Of course no changes have been made to your original > contacts list. The offending (virus) message may then be automatically > stored in your "Drafts" or "Outbox" folder. Go in there and delete the > offending message. Problem is solved and virus is not spread. > > Try this and pass on to your email contacts.
Here's an easy way to find out when/if you get an email worm.. add your name to your own address book.
If you start getting email from yourself, you either got a worm or you just need therapy.
To date I have received this same virus about 30 times via email, only two from letterheads, the rest I have no idea who they are havent been infected though. It changes the file attachment name each time too.
Posted by AdrienneMorgan (Member # 1046) on :
Mike, I sometimes send myself mail just so I don't get lonely.....
I got it again from a Minna.hill@swipenet.se..... Just keeping ppl posted, someone may have that person in thier address book, and they may have no idea they have the virus.
[ November 27, 2001: Message edited by: AdrienneMorgan ]
Posted by Arvil Shep' Shepherd (Member # 2030) on :
Adrienne, I got the same email today from "Minna hill" Checked for virus and so far I am not infected. Shep'
Posted by Jon Butterworth (Member # 227) on :
As far as I can tell .. this virus does not use your address book .. it replies to all mail you have recieved and answers it!
So... not having an address book ain't going to isolate your friends if you get it.
All I can say is I have cleaned out my inward mail ... outward mail and installed microsofts patch to stop it's automatic download on Outlook Express.
This one is a nasty! So far not destructive! It has hit the national news here in OZ!
)I spent alot of time calling people last night to warn them that they shouldn't open anything from me
