Re: Email Virus' and TB!
Hello Douglas Hinds, On Fri, 05 May 2000 15:26:48 -0600 GMT your local time, which was Saturday, May 06, 2000, 4:26:48 AM (GMT+0700) my local time, Douglas Hinds wrote: . I'll soon know. The not so good (I'm told) anti-virus installed shows nothing on any of the 10 partitions, but I forgot to set it for all files. Maybe I should install the better one already. Douglas Douglas, i will answer this offline. Installing and checking all files will run your already slow machine like a snail. I will send you full info to get the scripting knocked out permanently. Best regards, tracer -- Using theBAT 1.42 Beta/21 with Windows 98 mail to : [EMAIL PROTECTED] I am using FireTalk: 321338 ICQ: on request Website: www.phuketcomputers.com Our special website hosting/mailservers are now operational -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Re: Email Virus' and TB!
W You are better off keeping your antivirus sw up to date and never W opening suspicious files...especially ones with the .VBS extension. W Unless you are in the programming field, it is most unlikely anyone W would send you a .VBS file unless it was malicious code. Yes, I post this again to remind everyone that what VBS actually stands for is "Virus Broadcast System." ;) -tom! -- Hopin' this said *something* useful, [EMAIL PROTECTED] out. -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Email Virus' and TB!
Hello fellow The Bat User Discussion List members, A attachment containing the ILOVEYOU virus was received and deleted without double clicking on it, although HTML Autoview had been set so TB opened in that way first. Searching on the files it sets in C:\ showed nothing. I made Kill Filters for all active accounts, which act on detecting the signal string ILOVEYOU (without the ) in the subject of any message. I also turned off "HTML Autoview" from the "View" menu of all accounts. Any opinions about that being an adequate solution? Thanks in advance. I did not put ILOVEYOU in the subject of this post, since any answer containing it will presumably be killed. Best regards, Douglas -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Re: Email Virus' and TB!
Howdy Douglas, Friday, May 05, 2000, 10:31:10 PM, you wrote: DH Hello fellow The Bat User Discussion List members, DH A attachment containing the ILOVEYOU virus was received and deleted DH without double clicking on it, although HTML Autoview had been set DH so TB opened in that way first. Searching on the files it sets in DH C:\ showed nothing. DH I made Kill Filters for all active accounts, which act on detecting DH the signal string ILOVEYOU (without the ) in the subject of any DH message. I also turned off "HTML Autoview" from the "View" menu of DH all accounts. DH Any opinions about that being an adequate solution? Thanks in DH advance. No..because it only needs to change its name and your check will no longer work...and in fact, that is exactly what it HAS done (or rather someone has done it for it) and there are now 3 versions (at last count) of the letters with the attachment and in each case the subject and message has changed and the name of the VBS file has been changed. You are better off keeping your antivirus sw up to date and never opening suspicious files...especially ones with the .VBS extension. Unless you are in the programming field, it is most unlikely anyone would send you a .VBS file unless it was malicious code. -- Best regards, Woofie Http://www.woofess.com mailto:[EMAIL PROTECTED] -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Re[2]: Email Virus' and TB!
Hola Woofie other fellow The Bat User Discussion List members, Friday, May 05, 2000, 7:49:23 AM, you wrote regarding the ILOVEYOU virus that I received and deleted without double clicking on it, after HTML Autoview opened it (maybe it wasn't the attachment) first. DH I made Kill Filters ... on the string ILOVEYOU .. in the DH subject [and] turned off "HTML Autoview". [Is that] an adequate DH solution? W No...there are now 3 versions (at last count) of the letters with W the attachment and in each case the subject and message has W changed and the name of the VBS file has been changed. W You are better off keeping your antivirus sw up to date and never W opening suspicious files...especially ones with the .VBS extension. W Unless you are in the programming field, it is most unlikely anyone W would send you a .VBS file unless it was malicious code. As I matter of fact, I show NO *.vbs file on c:\. BUT - I just found LOVE-LETTER-FOR-YOU.TXT.vbs in my TB attach directory on D:\ and deleted it twice. That leaves 6 .vbs files in E:\ (the same 3 in two places, all Digital.vbs, except that the other two are numbered (i.e. Digital2.vbs). These look like they're part of OS/2. They're all 0kb and from '95 and '96. However, some strange things are happening when I download mail. I am getting asked for my password repeatedly, and I am getting "Bad Login" and "Connection to host broken" messages. But maybe the problem is on the server - or with the phone line. I'll soon know. The not so good (I'm told) anti-virus installed shows nothing on any of the 10 partitions, but I forgot to set it for all files. Maybe I should install the better one already. Douglas -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
Re: Email Virus' and TB!
Hello Woofie, On Fri, 5 May 2000 21:49:23 +0800 GMT your local time, which was Friday, May 05, 2000, 8:49:23 PM (GMT+0700) my local time, Woofie wrote: Howdy Douglas, Friday, May 05, 2000, 10:31:10 PM, you wrote: DH Any opinions about that being an adequate solution? Thanks in DH advance. No..because it only needs to change its name and your check will no longer work...and in fact, that is exactly what it HAS done (or rather someone has done it for it) and there are now 3 versions (at last count) of the letters with the attachment and in each case the subject and message has changed and the name of the VBS file has been changed. You are better off keeping your antivirus sw up to date and never opening suspicious files...especially ones with the .VBS extension. Unless you are in the programming field, it is most unlikely anyone would send you a .VBS file unless it was malicious code. Under windows 95 its unlikely anyone has vbs associated with anything . We experimented today and all my systems are now again setup to go to Ultraedit when VBS or VBE is clicked. In addition if one gets infected and hasnt rebooted yet, push power to switch off, reboot and under 98 recover previous registry. After which one only has to delete the 3 files. if a reboot has taken place and thus many files have been infected, very likely all those infected files with extension vbs have to be deleted. Best regards, tracer -- Using theBAT 1.42 Beta/21 with Windows 98 mail to : [EMAIL PROTECTED] I am using FireTalk: 321338 ICQ: on request Website: www.phuketcomputers.com Our special website hosting/mailservers are now operational -- -- View the TBUDL archive at http://tbudl.thebat.dutaint.com To send a message to the list moderation team double click here: mailto:[EMAIL PROTECTED] To Unsubscribe from TBUDL, double click here and send the message: mailto:[EMAIL PROTECTED] -- You are subscribed as : archive@jab.org
