HomeMagazineListingsUpdateLinksContexts

 


 Ballet.co Postings Pages

 Some Special Threads:
  GPDTalk about George Piper Dances ! NEW !
  NBTTalk about Northern Ballet Theatre
  SBTalk about Scottish Ballet
  ENBTalk about English National Ballet
  BRBTalk about Birmingham Royal Ballet
  TodaysLinks - worldwide daily dance links
  Ballet.co GetTogethers - meetings and drinks...

  Help on New Postings


Subject: "Virus Warning - W32.Badtrans.B@mm" Archived thread - Read only
 
  Previous Topic | Next Topic
Printer-friendly copy     Email this topic to a friend    
Conferences What's Happening Topic #2311
Reading Topic #2311
Bruce Madmin

28-11-01, 09:53 PM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
"Virus Warning - W32.Badtrans.B@mm"
 
   LAST EDITED ON 29-11-01 AT 07:52 AM (GMT)

There is a horrid virus going around called W32.Badtrans.B@mm

I've had getting on towards 200 of these come in in the last in the last few days and the rate of arrival is climbing..

It arrives as an email (from somebody you know or may have had email contact with in the dim and distant past or perhaps were on a circulation list with) with little or no text and 2 or 3 attachements/extensions. The first will be one of the following:

.doc
.mp3
.zip

The second extension that is appended to the file name is one of the following:

.pif
.scr


Just delete the complete email and attachments and you should be OK. However it looks like Microsoft Outlook

{correction - I think it is Internet Exploreer email. See later postings

has some bug that allows the email to do horrid things automatically. Sorry, I don't use Outlook but if you do read the page below. Anyway If you get the option and open one of the attachment it seems to do lots of clever things not the least being to propagate itself to all your address book.

Read more about it here.. and also how to get rid of it:
http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html

If you don't know so much about computers for goodness sake get some virus protection *and* update it every few days by visiting the relevant site - most of them make it pretty easy these days. Horrid world


  Printer-friendly page | Top

  Subject     Author     Message Date     ID  
  RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 28-11-01 1
     RE: Virus Warning - W32.Badtrans.B@mm pmeja 29-11-01 2
         RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 29-11-01 3
         RE: Virus Warning - W32.Badtrans.B@mm Brendan 29-11-01 4
             RE: Virus Warning - W32.Badtrans.B@mm Karen Ritchie 29-11-01 5
                 RE: Virus Warning - W32.Badtrans.B@mm pmeja 29-11-01 6
                 RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 29-11-01 7
  RE: Virus Warning - W32.Badtrans.B@mm alison 29-11-01 8
     RE: Virus Warning - W32.Badtrans.B@mm Robert 29-11-01 9
         RE: Virus Warning - W32.Badtrans.B@mm Robert 29-11-01 10
             RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 29-11-01 11
         RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 29-11-01 12
             RE: Virus Warning - W32.Badtrans.B@mm Alexandra 29-11-01 13
                 RE: Virus Warning - W32.Badtrans.B@mm lara 29-11-01 14
  RE: Virus Warning - W32.Badtrans.B@mm Bruce Madmin 04-12-01 15

Conferences | Topics | Previous Topic | Next Topic
Bruce Madmin

28-11-01, 10:00 PM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
1. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #0
 
   Oh and forgot to say - most of the infected email I've received has a title/sunbject of just "Re:"


  Printer-friendly page | Top
pmeja

29-11-01, 01:16 AM (GMT)
Click to EMail pmeja Click to send private message to pmeja Click to view user profileClick to add this user to your buddy list  
2. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #1
 
   thank you! i too have been getting those for the past few days and have not opened any of them. i just generally don't open attachments. today i got one that purported to be from brendan mccarthy and funnily enough one the other day from the name gielgud! in the trash, in the trash!
(thanks bruce)


  Printer-friendly page | Top
Bruce Madmin

29-11-01, 07:48 AM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
3. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #2
 
   Overnight another 11 have come in.

Here is the Macafee page on it:
http://www.mcafee.com/anti-virus/viruses/badtrans/default.asp?cid=2607

It's a difficult time as this moves around so can I suggest we don't name anybody who may, or may not, have been hit by this or other viruses.

It would seem that anybody who uses IE for their email as well should be very careful - the virus exploits a loophole. Microsoft have a page:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS01-020.asp


  Printer-friendly page | Top
Brendan

29-11-01, 07:50 AM (GMT)
Click to EMail Brendan Click to send private message to Brendan Click to add this user to your buddy list  
4. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #2
 
   I fear I may have unwittingly retransmitted the virus to some of you and I apologise profusely. I had an email from another balletco contributor. When I opened it, it triggered the virus (which was not picked up by my anti virus software). In turn it bounced the virus on to everyone to whom I ever sent an email.

If you have had any emails from me in the last 24 hours with a purported attachment, delete them. Don't even think of opening them.


  Printer-friendly page | Top
Karen Ritchie

29-11-01, 11:22 AM (GMT)
Click to EMail Karen%20Ritchie Click to send private message to Karen%20Ritchie Click to add this user to your buddy list  
5. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #4
 
   I got this message last night. Does the worm come from the message or the attachments? My talk21 email can't open attachments so am I still infected or do I proceed as if infected anyway?


  Printer-friendly page | Top
pmeja

29-11-01, 11:33 AM (GMT)
Click to EMail pmeja Click to send private message to pmeja Click to view user profileClick to add this user to your buddy list  
6. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #5
 
   well i had opened the e-mail on one and not the attachments, and though nothing misbehaved, i went to symantec's website and did a virus scan and it came up clean. seems pretty easy to spot, though, and i noted that the file size always seems to be 40.
on guard!


  Printer-friendly page | Top
Bruce Madmin

29-11-01, 12:43 PM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
7. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #5
 
   > Does the worm come
>from the message or the
>attachments?

It comes from the attachments - that's always the case. The complicating factor is that sometimes email packages automatically run attachments or by clever programming can be made to automatically run and thus infect you.

But rather then rely on what we might know or share here I think readers in general should have anti-virus software, and keep it regularly updated. Anti-virus software you bought 3 months ago is not going to do much for you unless it is updated by visiting the relevant sites. The software should stop you getting infected in the first place but also should have a capability of checking your system totally to see if anything has crept in.

So... to see if you are ok or not it strikes me that you need to do:

1) Visit your anti-virus software supplier and get the latest updates to the virus definitions your software uses
2) run a sweep of your system

The specifics will vary with the package you have and version etc but that in essence is what anybody who is worried should be doing.


  Printer-friendly page | Top
alison

29-11-01, 01:28 PM (GMT)
Click to EMail alison Click to send private message to alison Click to view user profileClick to add this user to your buddy list  
8. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #0
 
   If you're using Outlook/Express, keeping the Preview Pane open is a really good way of getting the virus to trigger automatically (she says from experience). Cancel the preview pane via the View option. Good old Hotmail, on the other hand, doesn't preview things, so I think I was safe there.


  Printer-friendly page | Top
Robert

29-11-01, 02:54 PM (GMT)
Click to EMail Robert Click to send private message to Robert Click to view user profileClick to add this user to your buddy list  
9. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #8
 
   I have recieved two emails from Brendan Macarthy I tried
without success, to reply without opening the attatchment. I will now destroy! Sorry Brendan I thought you were being friendly!


  Printer-friendly page | Top
Robert

29-11-01, 03:32 PM (GMT)
Click to EMail Robert Click to send private message to Robert Click to view user profileClick to add this user to your buddy list  
10. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #9
 
   Having tried to reply to Brendanís message without opening the attachment could I have become infected? How will I know if I am infected? Sorry I am a bit of a computer dolt, but live in fear! I looked at the site Bruce recommended and found it a bit incomprehensible. Bruce can you recommend any anti virus software I should buy? I think my computer came with Macafee but I have never really taken really looked at it.


  Printer-friendly page | Top
Bruce Madmin

29-11-01, 04:58 PM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
11. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #10
 
   The two best known anti-virus applications I've heard of are Norton and Macafee. If you have Macafee I'd build on that.

You may well be in for a bit of a learning curve and it might be worthwhile finding a book. Note that when I say build its apt because your Macafree was up to date when you got it and will now need updating via their website with details of all the latest viruses. If its over a year old you will probably have to pay for access for another year of updating and so on. But get a book - computers and software are all different and viruses seem to cause pain and agroo whether you get one or not!


  Printer-friendly page | Top
Bruce Madmin

29-11-01, 05:05 PM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
12. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #9
 
  
You can't respond to one of these emails by just hitting reply.

What they do is add a '_' in front of the email address (so it becomes _gatesb@microsoft.com for example) and the email gets bounced back to you. The idea is that it delays warning messages getting through to the poor person with the virus and hence it can carry on doing its work the longer.

If you get a funny email from sombody you know either phone them or at least use their normal email address to contact them.


  Printer-friendly page | Top
Alexandra

29-11-01, 05:34 PM (GMT)
Click to EMail Alexandra Click to send private message to Alexandra Click to view user profileClick to add this user to your buddy list  
13. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #12
 
   Thanks for posting this warning, Bruce -- I'm glad to know the virus's name. (Sorry to do this on board, but I replied to your email yesterday and about an hour later got it bounced back. I'll try again today, but I did want you to know I'd replied )

About virus software, I learned the hard way with the Sir Cam virus, which I got last spring. I have Norton Antivirus and I thought I was being virtuous by updating once every week or so. Well, obviously if you update Tuesday morning, and Whiz Kid Virus Maker unleashes something the next day, waiting a week doesn't help much. I now update every morning and every evening. There's an automatic update feature, and if you don't need any updates it tells you, so this usually takes only about 20 seconds. It's amazing (and frightening) how many times there have been new material every day -- sometimes three and four days in a row.

Obviously, they should bring back the stocks for virus makers (joke, joke)


  Printer-friendly page | Top
lara

29-11-01, 06:47 PM (GMT)
Click to EMail lara Click to send private message to lara Click to view user profileClick to add this user to your buddy list  
14. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #13
 
   Thank heavens for Macs! These Internet viruses that are attached to emails don't seem to affect us Apple folks.

lara


  Printer-friendly page | Top
Bruce Madmin

04-12-01, 08:39 AM (GMT)
Click to EMail Bruce%20M Click to send private message to Bruce%20M Click to view user profileClick to add this user to your buddy list  
15. "RE: Virus Warning - W32.Badtrans.B@mm"
In response to message #0
 
   Just to say that this still rattles on and just as many people are being caught as ever - I've had over 30 infected emails in the last day. Note that if you are using Outlook as your email application you can become infected without clicking on a thing - so do take seriously! (and do take care!)


  Printer-friendly page | Top

Conferences | Topics | Previous Topic | Next Topic

 
Questions or problems regarding this bulletin board should be directed to Bruce Marriott