Replies to this message are sent to The Chevelle Mailing List
------------------------------------------------------------

Just came across this on another list I belong to....kinda interesting.

jerry



http://www.cnn.com/2001/TECH/internet/11/26/badtrans.worm/index.html






----- Original Message -----
From: "Keith Cooper" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 28, 2002 10:46 PM
Subject: Re: [Chevelle-List] Virus information update


>
> Replies to this message are sent to The Chevelle Mailing List
> ------------------------------------------------------------
>
> It only infects the file if you activated the virus by opening the file.
You
> activate the virus by opening the file. If you delete the email and do not
> view it or open it then you are OK. Just as I say in previous email. Do
Not
> Open the attachment and you will be OK. Delete the email and you will be
Ok
> (Delete it from the Delete Folder also.) Open or View the email and you
got
> the viurs. Please read pass emails.
> I am only trying to stop the virus from the email and specially from my
> favorite Chevelle list. Everyone must readl the emails and follow the
> instructions. The virus has been sent to many members of this list. DO NOT
> OPEN ANY "SCR" FILE OR DOUBLE DOT FILE ((YOUR.CHEVELLE.PIC),
> (PICTURE.CHEVELLE.DOC), (NEW.DOC.MP3)   ETC) \
> Keith
>
> ----- Original Message -----
> From: "Rodney." <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, November 28, 2001 10:21 PM
> Subject: Re: [Chevelle-List] Virus information update
>
>
> >
> > Replies to this message are sent to The Chevelle Mailing List
> > ------------------------------------------------------------
> >
> >
> > But if you have Norton setup to scan your incoming email, it will scan
the
> > file and detect that it's badtrans.  Then when you hit repair, it will
say
> > cannot repair.  Then Norton asks if you want to quarantine it.  When you
> say
> > yes, it takes the attatchment and moves it to quarantine so that you
> cannot
> > run the attachement from your email program.  Thus, the virus was
detected
> > before you ran the program.  So how could it have possibly infected the
> > kernel32.exe file if the attachment was never run?   It couldn't have.
> >
> > Rodney.
> > 71 Chevelle
> > Phoenix, AZ
> >
> > ----- Original Message -----
> > From: "Keith Cooper" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Wednesday, November 28, 2001 6:58 PM
> > Subject: Re: [Chevelle-List] Virus information update
> >
> >
> > >
> > > Replies to this message are sent to The Chevelle Mailing List
> > > ------------------------------------------------------------
> > >
> > > Your are right Rodney, Norton will detect the virus, but it can not
> repair
> > > it. You will have to delete the Kernel32.exe file and restore it from
> the
> > > CD. Check the date of the virus definition file. I got the virus
because
> > the
> > > program was not updating the definition file. It was only updating the
> > > program. See my email on Virue information update on where to manually
> get
> > > the new definition file if your program is not updating correctly.
This
> is
> > a
> > > bad virus.
> > > The viruse DEFINITION  file should be dated 11/24/01
> > > Keith
> > >
> > > ----- Original Message -----
> > > From: "Rodney." <[EMAIL PROTECTED]>
> > > To: <[EMAIL PROTECTED]>
> > > Sent: Wednesday, November 28, 2001 8:41 PM
> > > Subject: Re: [Chevelle-List] Virus information update
> > >
> > >
> > > >
> > > > Replies to this message are sent to The Chevelle Mailing List
> > > > ------------------------------------------------------------
> > > >
> > > > My Norton 2002 has been detecting BadTrans just fine... 3 times in
> fact.
> > > > You might try updating your virus definitions more often.
> > > >
> > > > Rodney.
> > > > 71 Chevelle
> > > > Phoenix, AZ
> > > >
> > > >
> > > > >
> > > > > [EMAIL PROTECTED] wrote:
> > > > > >
> > > > > > Group,
> > > > > >
> > > > > > I have also located the noted virus on my computer. It is the
> > > > > > W32.Badtrans.B@mm as mentioned by Keith. I have the current 2002
> > > > > > Norton software loaded and it does not clean or quarantine the
> > virus.
> > > > > > From what I am understanding it is or might be event triggered.
> > > > > >  Meaning, it could activate from your computers system clock
etc.
> It
> > > > > > has been identified in the following files in my computers
system.
> > My
> > > > > > system runs Windows 98. Does anyone know how or what we can do
to
> > > > > > correct these infected files since the current Norton's
Anti-virus
> > > > > > software cannot clean of quarantine the virus?
> > > > > >
> > > > > > C:\windows\system\Kernel32.exe
> > > > > > C:\Windows\system\KDll.Dll
> > > > > >
> > > > > > Thanks to any or all that might reply to this email.
> > > > > >
> > > > > > Dwaine
> > > > >
> > > > > --
> > > > > Check out my webpage at http://www.ProStreetCar.com
> > > > > and my For Sale page at
http://www.ProStreetCar.com/classifieds.html
> > > > > Team Chevelle membership #178 (Gold)
> > > > > Time Flies: "It's funny how you can watch a clock and time seems
to
> > > > > stand still.  But turn away, and you have to measure time with a
> > > > > calendar rather than a clock."  mjp
> > > > >
> > > > > -----------------------------------------------------
> > > > > To Unsubscribe please visit www.chevelles.net/list.html
> > > > > To start a new topic, send mail to:
[EMAIL PROTECTED]
> > > > >
> > > >
> > > >
> > > >
> > > >
> > > > -----------------------------------------------------
> > > > To Unsubscribe please visit www.chevelles.net/list.html
> > > > To start a new topic, send mail to: [EMAIL PROTECTED]
> > >
> > >
> > > -----------------------------------------------------
> > > To Unsubscribe please visit www.chevelles.net/list.html
> > > To start a new topic, send mail to: [EMAIL PROTECTED]
> >
> >
> >
> >
> > -----------------------------------------------------
> > To Unsubscribe please visit www.chevelles.net/list.html
> > To start a new topic, send mail to: [EMAIL PROTECTED]
> >
>
>
>
> -----------------------------------------------------
> To Unsubscribe please visit www.chevelles.net/list.html
> To start a new topic, send mail to: [EMAIL PROTECTED]
>
>


-----------------------------------------------------
To Unsubscribe please visit www.chevelles.net/list.html
To start a new topic, send mail to: [EMAIL PROTECTED]

Reply via email to