Another virus alert
Thursday, November 29, 2001 by MobiusCo | Discussion: WinCustomize Talk
Just a note, chatting with two other members of wincustomize and skinz, and we where all hit by the same virus at the same time, so I am not sure if members here are being targeted again but keep an eye out for emails from .fr servers. The email contained the following virus: W32.Badtrans.B@mm
and yes norton caught it
and yes norton caught it
 |
|
Page 1 of 2 | |
|
|---|
Firestorm
Reply #2 Thursday, November 29, 2001 7:31 AM
Reply #2 Thursday, November 29, 2001 7:31 AM
Been there, done that, had to reformat my hard drive yesterday.
I don't know how I got infected, though. The only attachments I've opened lately were cleared by McAfee.
I don't know how I got infected, though. The only attachments I've opened lately were cleared by McAfee.
shoggot
Reply #3 Thursday, November 29, 2001 7:48 AM
Reply #3 Thursday, November 29, 2001 7:48 AM
mcafee wasn't catching badtrans until, IIRC, Sunday or Monday - and it started htiting friday/saturday.
I posted news on this one before theregister, even
OE is ass. Any software which ships w/ "features" which degrade security enabled by default is idiotic.
I posted news on this one before theregister, even
OE is ass. Any software which ships w/ "features" which degrade security enabled by default is idiotic.
Firestorm
Reply #5 Thursday, November 29, 2001 8:09 AM
Reply #5 Thursday, November 29, 2001 8:09 AM
I got an email yesterday morning. It supposedlyt came from an online music store I contacted a couple months ago. It didn't have any text, just two attachments (setup.doc.scr and getmsg.com). McAfee cleared them, I so I tried running getmsg.com. Next thing I know, kernel32.exe was infected.
There's always the possibility I got infected through means other than those attachments, but if other WCers have been targetted too I guess it's not likely.
There's always the possibility I got infected through means other than those attachments, but if other WCers have been targetted too I guess it's not likely.
shoggot
Reply #6 Thursday, November 29, 2001 10:45 AM
Reply #6 Thursday, November 29, 2001 10:45 AM
Please. It's not WC being targetted, it's the world.
Yes, you infected yourself when you opened an unrequested attachment from that music company.
It's called badtrans. www.theregister.co.uk has a story or two on it.
Wouldn't have been a problem if you weren't using OE.
Yes, you infected yourself when you opened an unrequested attachment from that music company.
It's called badtrans. www.theregister.co.uk has a story or two on it.
Wouldn't have been a problem if you weren't using OE.
Firestorm
Reply #7 Thursday, November 29, 2001 1:10 PM
Reply #7 Thursday, November 29, 2001 1:10 PM
What's so far-fetched about this particular community being targeted? I've seen it happen elsewhere. Some people go really, really, REALLY far to annoy boards or sites they see as their rivals.
DavidK
Reply #8 Thursday, November 29, 2001 1:17 PM
Reply #8 Thursday, November 29, 2001 1:17 PM
Firestorm... this one has been mentioned on CNN. It's propogating everywhere.
migellito
Reply #9 Thursday, November 29, 2001 1:20 PM
Reply #9 Thursday, November 29, 2001 1:20 PM
i've gotten tons of them, but norton has caught them all.
the watchword on all this sort of thing remains pretty simple - don't open attachments if you aren't sure of them. even if it just seems to say *.jpg :]
the watchword on all this sort of thing remains pretty simple - don't open attachments if you aren't sure of them. even if it just seems to say *.jpg :]
Firestorm
Reply #10 Thursday, November 29, 2001 1:48 PM
Reply #10 Thursday, November 29, 2001 1:48 PM
DavidK: Oops 
Firestorm vows to turn on CNN more often, even if Paula Zahn and Aaron Brown make his skin crawl.
Firestorm vows to turn on CNN more often, even if Paula Zahn and Aaron Brown make his skin crawl.
paxx
Reply #11 Thursday, November 29, 2001 3:48 PM
Reply #11 Thursday, November 29, 2001 3:48 PM
Outlook XP refuses to let me open any kind of script or executabe file, even if I wanted to. And it's actually pissing me off. So that Outlook Express ships with "unsecure" features doesn't bother me. I'd rather be in control of my own security.
Firestorm
Reply #12 Thursday, November 29, 2001 4:15 PM
Reply #12 Thursday, November 29, 2001 4:15 PM
That's what you get for buying Big Brother's latest privacy probe... I mean OS. Yeah, that's it. OS 
Now I'm gonna go watch "1984," "Metropolis," and I think I'll listen to Queen's "The Works" while I'm at it
Now I'm gonna go watch "1984," "Metropolis," and I think I'll listen to Queen's "The Works" while I'm at it
adni18
Reply #13 Thursday, November 29, 2001 6:14 PM
Reply #13 Thursday, November 29, 2001 6:14 PM
Is it the virus that it comes with e-mails with subject "Re: " and size 40K, from different senders?
I have gotten tons of this kind of e-mails with attachments, the last days, but I never open them.
I have gotten tons of this kind of e-mails with attachments, the last days, but I never open them.
MobiusCo
Reply #14 Thursday, November 29, 2001 6:36 PM
Reply #14 Thursday, November 29, 2001 6:36 PM
yes adni18 that is what it is. but I have also gotten a few that has subjects in them. But in general it has just been an email with the re: in it and an attachment, as for the size I cannot tell, Norton stops is before it is even downloaded. No offense against the McAfee users and company but everyone I know that uses McAfee gets hit a lot and it never detects the virus until after the damage is done. You might want to switch to norton antivirus, and stay away from the norton system works
shoggot
Reply #16 Thursday, November 29, 2001 7:40 PM
Reply #16 Thursday, November 29, 2001 7:40 PM
39-42k. pine doesn't stop me from downloading 'em, but could care less, freebsd has no idea what to do w/ .scr's...
paxx
Reply #17 Thursday, November 29, 2001 8:59 PM
Reply #17 Thursday, November 29, 2001 8:59 PM
I'm sorry but who would even open a scr, com, bat, pif, exe from someone they don't know. I know a lot of people do, and that's how virii prosper, but come on! I don't meen to be disrespectful to those who get caught, but I guess everybody has to learn. :/
MobiusCo
Reply #18 Thursday, November 29, 2001 10:16 PM
Reply #18 Thursday, November 29, 2001 10:16 PM
well paxx with this one I got it was embedded in the email, and like the one I got that norton eliminated was encoded in the email to open automatically bypassing the outlook xp safety, so if I had not had norton I would of been screwed, even thought I do not open any attachment that is not known, and even the known ones get a second scan
paxx
Reply #19 Thursday, November 29, 2001 10:57 PM
Reply #19 Thursday, November 29, 2001 10:57 PM
You mean the attachement actuallyopened itself automatically? Man, that's mean. I suggest you turn off the preview pane, and just delete messages from people you don't know (and don't care to know) - except ones who's subject is something like "About your skin" or somethinglike that - before reading the mail. That's what I do. I read too many horror stories of the scripts they can put in an email.
- before reading the mail. That's what I do. I read too many horror stories of the scripts they can put in an email.
MobiusCo
Reply #20 Thursday, November 29, 2001 10:59 PM
Reply #20 Thursday, November 29, 2001 10:59 PM
hehehe yes it is nasty, and I have the panel preview off, I have never liked that thing. I do have filtering that auto deletes everything not address to exact emails, but still it happens, I just figured I would warn a few people that count on low level virus apps, or none at all. To take care
Please login to comment and/or vote for this skin.
Welcome Guest! Please take the time to register with us.
There are many great features available to you once you register, including:
- Richer content, access to many features that are disabled for guests like commenting on the forums and downloading skins.
- Access to a great community, with a massive database of many, many areas of interest.
- Access to contests & subscription offers like exclusive emails.
- It's simple, and FREE!
|
|
Page 1 of 2 | |
|
|---|
Reply #1 Thursday, November 29, 2001 6:42 AM