virus

[Guest guest]

> From: moonpigge@...

> The virus that's doing the rounds is called Aliz and it's been in

> existence for at least 5 months. The attachment includes a file

> named whatever.exe

The virus that is currently doing the rounds is a new version of the

Badtrans virus.

> There is no excuse for getting infected with this virus. All of the

> major virus checkers will detect it. If you get infected it's

> because you aren't running an up to date virus checker and you are

> opening mails with attachments.

I use Norton and I update it weekly. Norton didn't have an update for this

virus until the 24th. I was expecting to get mail with attachments, but I

still put the attachments on my desktop and ran them through Norton. The

software said they were clean, so I did open it and have been working to

clean my computer since. If anyone using Norton hasn't updated since the

24th you will need to do it to even find out if you are infected.

Pat.

Peace, Joy, Serenity.

www.houseofscents.com

Cosmeticinfo

[Guest guest]

The list does suppress attachments. Members get the virus from an outside

source; it goes to their address book and sends itself out from there.

Since many of us email each other privately, we are listed in each other's

address books.

If one is going to be on the Internet, sending, and receiving email it is

necessary to have and use anti virus software. Not having updated anti

virus software is like driving a car without a steering wheel or brakes - if

you are driving around like that, you will eventually run into something!

Co-owner

Toiletries List

Re: virus

Pam, run a scan. Hopefully you have Norton or one of the others. I picked

up a virus from this list. I think it's quarantined and shipped to Norton.

sheez. I thought this list suppressed attachments.

Barb J

[Guest guest]

<< and Lynn I think need to check their puters and update virus

protections.  >>

Jodi,

Which Lynn were you referring to?????

lynn in valencia

lavender bluffs bath and body

" A little touch of heaven in your bath "

[Guest guest]

I've gotten Two e-mails back from this group regarding the virus message I sent

earlier and both had attachments with nothing in them. and Lynn I think

need to check their puters and update virus protections. Jodi

[Guest guest]

Hello Pat, I gather this virus and the other one that's also

spreading at them oment can both run themselves from Outlook if you

use the preview pane so it's possible to get it without actually

opening the attachment. I hope your machine is now returned to health.

Kate

> I use Norton and I update it weekly. Norton didn't have an update

for this

> virus until the 24th. I was expecting to get mail with attachments,

but I

> still put the attachments on my desktop and ran them through

Norton. The

> software said they were clean, so I did open it and have been

working to

> clean my computer since. If anyone using Norton hasn't updated

since the

> 24th you will need to do it to even find out if you are infected.

>

> Pat.

> Peace, Joy, Serenity.

> www.houseofscents.com

> Cosmeticinfo

[Guest guest]

How do you know if you have a virus. I thought I did the scan but it didn't

say anything different afterwards???

Cate

[Guest guest]

I have been trying for two days to get the software from AGV...keeps timing out

for me too. Darn it...I will keep trying.

Christi

Re: virus

I also tried the grisoft.com, but was timed out.

[Guest guest]

Hi , yes my Norton id'ed the virus coming from Louis as badtrans.

Kathy R. in Indiana

----- Original Message -----

From: <lippoliti@...>

> What is the virus that we seem to have again? I know I have it,

> and my scanners have not picked it up yet. So I am posting on the

> web site-this is safe right? I don't dare open my e-mail as it sends

> stuff to people in my address book. I had bad trans before and got

> rid of it. Is this what everyone's scanner is identifying. If I

> know what I had, I can get rid of it. Please help. in NJ

[Guest guest]

I am sorry for any problems we have caused. I have run our virus program

and have been trying to get updates for two days from Norton. I also tried

the grisoft.com, but was timed out. I guess we are to remote with our phone

lines for that to work. Today I thought I had gotten the update from

Norton, now I am not sure. I am truly sorry for all the inconvenience we

may have caused. If we still have a virus, please let us know. Thank you.

Arline

www.alangocreek.com

List mom please !

> I have been trying to reach the owner or the list moms of this group. I

have

> been receiving emails sent to me with a download attachment. Some are

being

> sent out individually. What is going on? I will not download something

from

> a person I do not know. I tried to reach you via the email address listed

for

> you and got it returned to me.

> Cate

>

>

>

[Guest guest]

Me too...now frustrated and confused! Christi in Dallas

Re: virus

I thought I did the scan but it didn't say anything different afterwards???

[Guest guest]

Try this site I did their instant scan and it cleaned me right up. I had

two contaminated files.

Chris

http://housecall.antivirus.com

Re: virus

>

>

> I also tried the grisoft.com, but was timed out.

>

>

>

[Guest guest]

Thank you for the Housecall info I ran it and I was clean thank

goodness!!.....Pam

[Guest guest]

I did a Norton scan and it came up clean then I went to the PC cillin and

did there scan and had two contaminated files. They corrected them so I

should be clean for sure now. It will tell you if you have a virus so if it

said nothing I would guess you are clean. You may not have gotten the virus

just a lot of mail from others with it. I broke my own rule and opened an

attachment and that is how I got it.

Chris

Re: virus

>

> How do you know if you have a virus. I thought I did the scan but it

didn't

> say anything different afterwards???

> Cate

>

>

>

[Guest guest]

I also use AVG. It's easier to download the updates right from their site

and then move them to the update folder.

Sharon

> Me too...now frustrated and confused! Christi in Dallas

> Re: virus

>

>

> I thought I did the scan but it didn't say anything different

afterwards???

>

>

>

[Guest guest]

Thanks for the info, Chris.

Cate

[Guest guest]

There have been a number of posts to the list regarding the BadTransB virus.

I suggest that anyone on the ST list read the writeup on this virus by a

gentleman named Ferrie at the Semantec web site. This write up is at:

<http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.bmm (DOT) html>

A number of list members have reported getting this virus with a variety of

titles. There is a list of " known " titles for the attachments, so far, in

the above write up. New titles may be occurring, given the ability of this

virus to branch out and go down different paths. One of the unique aspects

of the BadTrans virus and something that will make sense to those who have

received it so far, is that it attacks the computer's e-mail in-box and not

the address book.

If you will look at the e-mail subjects you receive with

this virus, they will almost always contain an " re " and some

partial or complete variation of something you recently posted about. This

is coming from the " victim's " mail in their in-box. Most worm viruses of

this kind classically attack the address book. BadTrans is unique and

particularly vicious in that it bypasses current barriers protecting the

address book and simply attacks the vulnerable in-box. This, with the

ability of this virus to attack without the attachment being opened

directly, makes it extremely important that suspicious e-mails with

attachments not be opened in any way and instead be deleted immediately. Or

better yet, use your virus protection program to delete them or quarantine

them in such a way as to render them harmless.

More than likely anyone who has the two following conditions is going to end

up sending this virus to others on the list, should they be unfortunate

enough to get it themselves.

First, they probably get individual messages from the list as opposed to the

Digest format.

Secondly, they have either opened an e-mail containing the virus or have not

updated their operating

system and Microsoft Outlook to protect against viruses exploiting their

" MIME " (whatever that is) to execute without the attachment being open.

Virus protection is also of no value unless it is up to date.

The BadTrans virus was discovered on 11/24/01 and the most recent updates for it

are as

of 11/27/01. If you have not updated your virus protection to include these

updates, then you are vulnerable. Many virus programs can be set to

automatically update themselves; it would be wise to do this on a daily

basis in the morning before you open e-mail and if you are particularly

cautious, maybe once or twice more during the day. Usually this takes less

than two or three minutes to do.

Whoever gets this virus has a very specific number of steps that they need

to take to remove this virus from their computer. The Semantec site gives

very clear instructions on how this is to be done. If a person does not

understand the instructions, then they probably are not the person that

should remove the virus from their computer and should get help from either

a knowledgeable friend of computer professional.

Once the virus has been removed, they need to get their system up to date both

as to virus

protection and the fixes for weaknesses from the various Windows operating

systems. I have no idea how these things affect Mac users; somehow I envy

them that they don't seem to be plagued with these inconveniences. The

BadTrans virus, once it's on your computer, does a number of bad things on a

timed basis.

A hopefully complete description of the BadTrans virus and all the bad

things that it can do is contained in Ferrie's write up. This does not mean

that there may not be further permutations being introduced all the time.

Whoever is propagating this virus (not necessarily the author of the virus),

in my opinion, is also picking on the ST and possibly other .

Whether this is due to weaknesses in or some malicious animosity

toward ST and others is purely speculation. In particular, it seems to me

that the abuse of Hale's name and the phoney e-mail address may be a

point where variants of the virus may be being introduced. I seem to

remember that there is a expert on these things who is a member of this list

and would certainly like to hear his comments should he have time to look

into this. The reason for my suspicion is that the BadTrans virus is said

to have a " low " geographic distribution by Semantec.

I wish to state that the above was volunteered by my man, Chuckie Techie, aka

Jim

Vernon, as I am quite clueless about all the tech terms. Chuckie got an

e-mail containing this virus right in the middle of installing the new

Windows XP operating system and at a moment when the computer's virus

protection was turned off! Fortunately Chuckie, being always paranoid,

looked at the properties of the post (without opening it) and saw an

attachment with a " .scr " suffix. Even though this e-mail was in response to

my post to the list regarding Niacin, Chuckie deleted it without opening it

and fortunately saved us the grief of destroying the operating system right

in the middle of upgrading it. May we be as lucky in the future.

* * * * * * * * * * * * * * *

Rosemary Wedderburn-Vernon

Marina del Rey, CA

IronRoses@...

[Guest guest]

I am getting suspicious mail and no virus alert too. I just make sure that

I don't open them and delete them from my deleted folder as well.

Chris

Virus

> My apologies re: virus. Have removed it. Not sure why my 24 hr. online

> virus scanner didn't get it. Have to check that out.

>

> Tina

> Valleymade Naturals

>

>

>

>

[Guest guest]

After you delete it make sure you empty your trash can some viruses can be

activated from there.

>From: " D Beebe, D.C. " <res0btan@...>

> " oregondc " < >

>Subject: Virus

>Date: Fri, 9 Jan 1998 20:13:47 -0800

>

>Dr Dobson has the virus. do not open the following.bat file

_________________________________________________________________

Join the world’s largest e-mail service with MSN Hotmail.

http://www.hotmail.com

[Guest guest]

Someone has virus in system. would everyone please check their system.

Received from list.

Thanks for your time.

Michele

[Guest guest]

Dan,

I second your sentiments.

Lily Roselyn

At 11:16 AM 2/8/2002 -0800, D Beebe, D.C. wrote:

Doctors:

There have been numerous virus

infections in this listserve over the past month or so. If you do not

have norton or other protection spend the $50 and have the courtesy to

keep these atrocities at bay.

Thank you

Sponsor

ADVERTISEMENT

[Guest guest]

In a message dated 2/8/02 11:20:04 AM Pacific Standard Time,

res0btan@... writes:

<<

Doctors:

There have been numerous virus infections in this listserve over the past

month or so. If you do not have norton or other protection spend the $50 and

have the courtesy to keep these atrocities at bay.

Thank you >>

Dear listserv members,

Are there any of you actually using your computer without any virus

protection software? If so, could you please get some installed before you

continue to use . Thanks so much.

Minga Guerrero DC

Doctors:

There have been numerous virus infections in this listserve over the past month or so. If you do not have norton or other protection spend the $50 and have the courtesy to keep these atrocities at bay.

Thank you

[Guest guest]

Virus

Doctors:

There have been numerous virus infections in this listserve over the past month or so. If you do not have norton or other protection spend the $50 and have the courtesy to keep these atrocities at bay.

Thank you

I suggest that attachments should not be used. Everything should be included in the body of the message. Cut and paste if need be.

If you don't open anything you can't be harmed by a virus.

Terry in Ashland

[Guest guest]

I got a site off of the local news that has a virus scan product free

download... this virus has been emailed to me aproximately 9 times now... Go

to a search engine and type in AVG virus scan ... this will let you

download a program to check your computer for viruses as well as scanning

emails... I read about this new virus and it sounds pretty yucky...

Good luck

[Guest guest]

doh!!!!... ::::::smacks her forhead:::::::... how did you find out you had

it, what happened??? etc... i can not afford to have this POS repaired, or

replaced... any info is helpful

[Guest guest]

I use AVG too. Caught the virus.

Dee

-- RE: Virus

I got a site off of the local news that has a virus scan product free download... this virus has been emailed to me aproximately 9 times now... Go to a search engine and type in AVG virus scan ... this will let you download a program to check your computer for viruses as well as scanning emails... I read about this new virus and it sounds pretty yucky...Good luck:)Our Message Boardhttp://www.voy.com/21568/Check out these great Molds!!http://soapwerks.com/martinworld.htmMember Kae's Site... Awesome oil Prices!http://www.olivetreesoaps.com/All posts to this list are copyrighted by post author. They may NOT be forwarded, copied, or used in anyway without the permission of the post author with the exception of answering posts to this list. Posts are personal opinions only.