Virus Onslught

[gwpriester]

I have started receiving a lot of virus infected messages in which I think the virus is part of the message which activates upon opening. The message show no attachments.

Keep your DAT files updated and be careful what you open.

Gary

Gary Priester

Moderator Person

<a href="http://www.gwpriester.com">
www.gwpriester.com </a>

http://www.thuntek.net/gwp/flag.png

[gwpriester]

I have started receiving a lot of virus infected messages in which I think the virus is part of the message which activates upon opening. The message show no attachments.

Keep your DAT files updated and be careful what you open.

Gary

Gary Priester

Moderator Person

<a href="http://www.gwpriester.com">
www.gwpriester.com </a>

http://www.thuntek.net/gwp/flag.png

[Erik Heyninck]

Me too I've had some...luckily Panda protected me!

Also had some double extensions attachments again (.doc.pif, .jpg.exe)

Beware the Jabberwock!

[gwpriester]

All of the messages I have received, and I just received about four more, have Re: in the subject line and nothing else.

I have opened the messages in POP 3 Scan Mailbox and they all appear to have the virus encoded in an HTML message.

If you missed the earlier SIRCAM message threads, POP 3 Scan Mailbox lets you check your messages on your ISP's server before you download them into your computer. It is a freeware application and worth installing.

Gary

Gary Priester

Moderator Person

<a href="http://www.gwpriester.com">
www.gwpriester.com </a>

http://www.thuntek.net/gwp/flag.png

[Peter Clifton]

Whilst most Virus companies report the virus activity based on the incident reports they receive from customers in the field.

Message labs, run a virus scanning email service for corporate customers, they log the actual number of intercepted viruses on a day to day basis

This link gives a list of the number and type of of viruses that they have intercepted on a month by month basis.

Viruseye Threat List

And this one gives a link for activity over the last 24 hours

Virus Eye Last 24 hours

The virus is probably BadTrans, major out break in the UK yesterday, BT OpenWorld got infected and emailed it to many of their customers.

I visit this site every morning to find out what is really happening.

Peter

[ED]

http://securityresponse.symantec.com...rans.b@mm.html

You can get this without opening a message. If you system is behind in security patches just viewing an email is enough to get infected. Really! you don't even have to open an attachemnt.

Make sure you have the latest patch for IE5 and you have nothing to fear. Look here to find out:

http://www.microsoft.com/technet/tre...n/MS01-020.asp

The BEST is good enough!

[This message was edited by ED on November 27, 2001 at 05:13.]

[gwpriester]

Ed

I am getting a Page Not Found error on the IE 5 link.

Gary

Gary Priester

Moderator Person

<a href="http://www.gwpriester.com">
www.gwpriester.com </a>

http://www.thuntek.net/gwp/flag.png

[ED]

<BLOCKQUOTE><font size="-1">quote:</font><HR>Originally posted by Gary W. Priester:
Ed

I am getting a Page Not Found error on the IE 5 link.

Gary

<HR></BLOCKQUOTE>

Gary... I just clicked it and it worked fine for me. I'm using IE.

Sometimes the problem is the newsgroup that splits the link into two lines. Simply make the link on long line and you'll go to the right page.

The BEST is good enough!

[Wolfgang]

Finally I got one of those today ...

Luckily my system did not get infected, because my Virus-Scanner (Norton) acted immediately.

Also the patch from Ed's link did say that it does not need to be installed on my system.

Looks like it pays off to update DAT-files / system patches in very short intervals ...

Strange enough, the virus was sent to one of my newest e-mail addresses that is not known very widely ...

Wolfgang

[pduggan]

Watch out... got one tonight. Outlook Express 6/Win2K Pro with all the latest security patches, but it was my constantly updated Panda Antivirus that saved me too! [img]/infopop/emoticons/icon_eek.gif[/img]

Peter</p>

Peat Stack or Pete's Tack?</p>

PS File extension .d.scr, but I'm not sure I'd have even found that out in time without the antivirus.