Return to KLUBNL.PL main page

rsgb_lf_group
[Top] [All Lists]

LF: Re: Alan infected ??

To: "rsgb_lf_group" <[email protected]>
Subject: LF: Re: Alan infected ??
From: "Dave Sergeant" <[email protected]>
Date: Wed, 1 Aug 2001 08:36:54 +0100
References: <000301c119f9$0891ab80$1f0f7bd5@default>
Reply-to: [email protected]
Sender: <[email protected]>
Alan Melia wrote:
Hi All, Brian CT1DRP reported a strange file with no subject but using a
title I had previously used on a message to Brian as a filename, and
appending the extensions .xls.bat

This sounds like the W32.Badtrans@MM virus which has been doing the rounds 
lately.
It sends itself as replies to unread mails in the victims inbox.  Like all these
things it causes no harm unless the attachment is opened, and in any case all 
the
current virus packages will detect it.  However as it is a reply to one of your 
own
mails it can take one unawares, but the double extension is a give away. Note 
that
the mails will come direct from the sender, not via the reflector.

Good practice in this case is to always read your mail then move it to a 
different
folder - leave your inbox empty so it will have nothing to work on - and check 
for
any unexpected outgoing mail before you connect and send it. Those who have 
always on
connection and have configured their system to send mail immediately have a 
problem
in this respect.

Cheers Dave G3YMC
[email protected]
[email protected]
http://www.dsergeant.btinternet.co.uk





<Prev in Thread] Current Thread [Next in Thread>
  • LF: Re: Alan infected ??, Dave Sergeant <=