GenMassachusetts-L Archives

Archiver > GenMassachusetts > 2001-04 > 0988537725


From: "Shel" <>
Subject: Re: [GM-L] VIRUS ALERT
Date: Sun, 29 Apr 2001 05:50:15 -0400
References: <00ab01c0cf94$e2e2d5c0$e104bbd0@w4o1r2>


Yup, its real!
I ran into this virus on an April 24 message exchange with
GenMassachusetts - D Digest V01 #206 when after sending a response message
which was published in full the next day I received a message immediately
from Domhnall Shaw o'Seaghdha which was a slightly
garbled version of the message I had just sent. Being suspicious I ran my
antivirus program (InoculateIT Personal Edition - FYI:the free version) and
received the following messages:

Deleted - Sorry_about_yesterday.DOC.pif - Win32. Badtrans.13312 worm
Deleted - C:\WINDOWS\INETD.EXE in WIN32 Badtrans.13312 Worm.
Advised - My Master Boot Record and Partition Boot Record were OK

Beware of this thing Shel
FYI: I captured this information with the print screen button which loads
the clipboard and then moved it immediately to a graphics program in order
to "capture" the next screen of antivirus info. This technique was part of
the discussion in my original message sent to the list which returned this
virus to me!


----- Original Message -----
From: "Sherman R. Ervin" <>
To: <>
Sent: Friday, April 27, 2001 11:39 PM
Subject: [GM-L] VIRUS ALERT


> Hello list family, I am sending this copy and pasted warning from another
group that we received.on the Viruses going around. We foolishly opened a
attachment from our group. So please be careful and consider an updated
antivirus program and still take caution because our repairman said it is
not 100% as there are new ones coming out. We have been advised by
several experienced people to not open forwarded mail which could have the
virus in the names. People dont know they are forwarding their viruses.
It cost over $200 and I want to spare the rest of you folks the same
expense. Sincerely, Gloria
>
> This following list letter was dated April 20th this month.
>
>
>
>
> Please make sure that you have an updated antivirus program installed
and
> enabled!
> Fred
>
> >
> > As many Rootsweb mail list subscribers know, it is impossible to receive
> an
> > attachment born virus from Rootsweb because the list servers at Rootsweb
> remove
> > all attachments before sending a posting onto a list.
> >
> > Nonetheless, some of the larger Rootsweb lists are currently having
> problems
> > due a new virus called W32 Bad Trans, which is spread subscriber to
> subscriber
> > in a new and novel way. This virus and its variants are of special
> concern to
> > list subscribers.
> >


This thread: