Dear All:
The message below is from Sue on the TSL list and
she states the situation quite clearly. The difficulty
is that the attachment may not show or there is a false
extension. It appears to have xxx.doc or xx.txt
but the real extension ( .scr.or .exe) is
59 spaces to the right. So even if you get a
email from a trusted source ( me or others) and
there is no message etc, be very careful. It will
also show about 29 or 30k as the size of the message.
So that is a dead giveaway in that there is 30 k
of message and it doesn't show up anyway .
I have also received a mumber of these and have advised
some of you of the problem. We will correspond to make
sure your computer is clean before resubscribing.
If anyone receives one of these virus transmissions
from a member:
A: advise the list of the name
B: send me the name and email address and
mail list.
Best Regards
John A Hansen
jahansen(a)qwest.net
List Admin
Forwarded message
Many of you will remember the "badtrans" virus last August. People seemed
to wise-up about that one, but now there is another _strain_ of the
badtrans virus called W32.Badtrans.B@mm and I have received quite a few of
them ... some from current list members. I am Bcc'ing those list members
whose computers are infected, so if you receive a copy of this message
without the [TSL] prepend, please quickly go to the link below to learn how
to clean the virus out of your computer.
You will NEVER receive a virus through the list, but if listmembers get
infected, their computer may send you the virus, which _may_ have a list
subject line.
My Norton "anti-virus" program is doing a very good job of detecting, but
Norton doesn't seem to have a complete write-up about this one. They do
mention the file extensions etc., but they don't mention how the email will
appear or whether there is a message or not. My experience has been that
only one has arrived with a subject line from a list post, the others
simply have a "Re:" in the subject line. I have seen no message (but maybe
Norton is deleting that too) Most of those I have received have come from
Australian or New Zealand email addresses, so they must have gotten it
first. Also, I don't know whether my Norton is doing this (the write-up
doesn't say) but the email addresses of the sending computers is altered by
having an underline character preceeding the address, such as
<_emailaddress(a)optusnet.com.au>
PLEASE remember to make sure you have up-to-date Anti Virus software, AND
remember to update the Virus definitions regularly. There are a lot of good
Anti Virus programs out there (I use Norton) but they aren't any good unless
you update them.
You can read about this virus and how to remove it from your system
on the Norton Symantec site ...
http://www.symantec.com/avcenter/
http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html
Sue
--