The email comes in with the subject "Re:" and nothing else. The email address is generally fake and it comes with two attachments. One is a txt document which has nothing in it and the other is a random file. There is no text in the body of the email.

Delete the email entirely without opening the attachments.

 |  IP: Logged

 |  IP: Logged

It can only be activated if you open the attached files. Unfortunately, with some older versions of IE (5.0 and 5.5) the file can launch automatically, so if you are running one of these, get the patch from Microsoft.

This worm does some very nasty things...it installs a trojan horse back door to your system, sends out your IP address to the author, then runs a keylogger that tracks every keystroke (including passwords, credit card numbers, etc) and places this file on your hard drive for the author to harvest.

Brad is right...be VERY careful when opening attachments.

For info on this virus, check out this link:
http://www.infoworld.com/articles/hn/xml/01/11/26/011126hnbadtrans.xml?1126alert

As always, be sure to check regularly for new virus definition files. Since November 1, Norton Antivirus has added 141 new definitions, and since February, they have added approximately 10,000!!!!!

I never received a virus via AOL. But that does not mean I won't. Take Brad's advice.

Better yet, don't open anything you get from a stranger. Let your virus scan engine look at any attachment you download, even if it comes from a friend. Sometimes the virus will attach itself without your friend even knowing it.

If you download a supposingly legit file, scan before opening it. Remember what happened to Josh's drive with that kmd.exe?

Keep your virus scan programs up to date.

Paul

This is a price Wintel PC users have to pay for Microsoft fusing so many parts of Internet Explorer, Outlook and MS Office deep into the core parts of the operating system. Microsoft does this for the sole purpose of keeping other Windows developers at a competitive disadvantage. In doing this, Microsoft has also created the biggest security compromise in computing history. For each patch Microsoft develops, virus writers will find other ways to insert malware into the average users PC. Perhaps some of the congress people who turned a blind eye to this new "settlement" with Microsoft might not have been so keen on the deal if they would bother to pay attention to just how bad virus attacks have become over the last few years.

------------------

http://www.autoramadrivein.com

I don't think this in itself means that Film-Tech readers are being targeted with viruses, though, that having been said, I have received 4 Badtrans e-mails since yesterday.

The Symantec website (see the link on my earlier post) states:

quote:

---

If SMTP information can be found on the computer, then it will be used for the From: field. Otherwise, the From: field will be one of these:

"Mary L. Adams" <mary@c-com.net>
"Monika Prado" <monika@telia.com>
"Support" <support@cyberramp.net>
" Admin" <admin@gte.net>
" Administrator" <administrator@border.net>
"JESSICA BENAVIDES" <jessica@aol.com>
"Joanna" <joanna@mail.utexas.edu>
"Mon S" <spiderroll@hotmail.com>
"Linda" <lgonzal@hotmail.com>
" Andy" <andy@hweb-media.com>
"Kelly Andersen" <Gravity49@aol.com>
"Tina" <tina0828@yahoo.com>
"Rita Tulliani" <powerpuff@videotron.ca>
"JUDY" <JUJUB271@AOL.COM>
" Anna" <aizzo@home.com>

---

 |  IP: Logged

Just to fill you in on the specs:

from: cronk.ps@verizon.net

subject: midterm-school law

body: "Hi! How are you?

I send you this file in order to have your advice

See you later. Thanks"

attachment: "midterm_school_law.doc.bat"

virus: Virus W32.Sircam.Worm@mm

I received it @ yahoo.com which has the built-in "scan with norton anti-virus". It's still in my Inbox if anyone wants me to forward it to them so they can poke around in it.

Disclaimer: none.

In version 6, available at windowsupdate.microsoft.com, click on: Tools -> Options -> Security and check the boxes for "Warn me when other applications try to send mail as me" and "Do not allow attachments to be saved or opened that could potentially be a virus".

These options are not available in OE 5, and I'm sure that in a week someone will have come up with a workaround for this security device, also.

And there's still no excuse not to have up-to-date virus protection, too.

 |  IP: Logged