posted on November 29, 2001 12:01:06 PM new
Hey Guy's!
Just got the virus for the third time in three day's. This time there were no words at all in the subject line, only the TIME.This thing is changing daily! When is it going to end? And don't belive what they say, that this is a medium risk. If it get's in it causes kaos and it's like nie impossible to remove.I know,I was dumb enough to open it. I was corresponding with a customer at the time and they were suppose to send me some pic's. So when it came I opened it thinking it was the pic's.What a mistake!!
posted on November 29, 2001 12:47:24 PM new
I had 5 virus attachments waiting for me when I turned on my computer this morning. I have the email pane turned off, so I can delete without reading the message. I did, however, go into properties with the email highlighted and I could see the name of the attachments. All were the typical virus ones. All 5 attachments were from people with whom I had an ebay transaction a long time ago, nothing recent. I guess this is the virus that attaches itself to unread, old messages.
posted on November 29, 2001 03:22:20 PM new
Well, I found out that I had the kak virus. Please keep in mind that I DO NOT open attachments from anyone. A techie at a computer repair store told me that now you don't even have to open attachments. So, after some research I found a wonderful website that found it and killed it. However I believe it is still on my hard drive. Now I have to figure out how to delete it. Norton did not find it even after the Live Update and running it 3 times. A lot of good they are. Also downloaded vCatch which is supposed to catch viruses on email. I did read that this particular virus is active on the 1st of every month after 5:00pm. Not particularly damaging just a nuisance. Apparently I've had this since Sept 1 (after 5:00pm of course). Any experts got any more advice?
posted on November 29, 2001 07:54:29 PM new
I was just told that if you have your own email added into your address book, you will automatically get an email on some of these virus's and you will know right away, if you have an anti-virus program "updated" and running.
posted on November 30, 2001 11:32:41 AM new
I have been sent 3 suspicious emails from previous buyers. What they all had in common were that they all had proper email addresses except they all had an underscore in front of them. All had attachments with nothing typed in the description area. Here is what to do if you do get it! Best of luck!
If you were not able to stop this virus from infecting your machine, I suggest either logging on to Norton's website linked here http://www.symantec.com/ or to MacAfee's site http://vil.mcafee.com/. For they have a downloadable patch to delete it from your system. The virus is called the W32.Badtrans.B@mm virus.
This was sent to me by a "great" ebay buyer and I thought it may be helpful to others.
posted on November 30, 2001 04:12:04 PM new
krazykiddies,
Just go into your quarantine and hit delete. When it tells you it won't be there anymore, (not those exact words)Just hit OK and go ahead and delete it.
Don't try to repair an email.
Sometimes you pick up things from different sites on the net. Norton, if it is up to date will catch and quarantine them. Usually they will be located in your Windows Temp file when you get one this way. Don't worry about trying to repair a the temp file either. You don't need and temp file from the net.
Just hit "Delete" and get on with some happy computing.
I agree with whoever said that having to reformat is not the way a person always has to go.
posted on December 2, 2001 07:11:16 PM new
OK everyone here goes: BadTrans is a worm that is embedded in the email itself. You do not have to open an attachment to get it. The best way to get rid of this virus is to get Norton 2002 Anti Virus or any other recognized anti virus program. I am responding to those who say they ran the virus scan for all files and came up with nothing. I did the same thing. You must take your computer to restart. If you have windows 95 or 98 hold down the ctrl button until the menu appears. Choose safe mode. Your files and desktop will look different but don't worry, that's as it should be. Run the anti virus scan when your computer is in safe mode and the program will bring up the BadTrans virus. Quarantine the virus first and then delete. I did it and it worked fine. When scan is done and you have quarantined and deleted the virus restart the computer as you usually would (not in safe mode). I hope this helps.
posted on December 3, 2001 12:03:21 AM new
OK, I was dumb. I opened it and also tried to open the attachment. It was from one of my former ebay customers. How do I know if I have this thing. I don't have a virus program. So what do I do now? How do I detect it and if it is here, how do I eliminate it at this point? Nothing seems to be going weird with my computer. Any and all help will be greatly appreciated. Oh, it was the Nude_Me version.
posted on December 3, 2001 12:12:22 AM new
One more thing. After reading Landotter's message I ran a search in my files for W32.Badtrans.B@mm and my search came up with no results. Does this mean I don't have this thing ? I am running Windows XP Home Edition, could this make any difference? HELP!
posted on December 4, 2001 09:46:21 AM new
A couple interesting facts - apparently BadTrans can infect your computer even if YOU don't open the attachment (see below from The Register), but only if you use Outlook Express.
Here's where jrome's advice comes into play and maybe why I haven't been infected - yet. Don't use Outlook Express or other extremely common s/w. Use webmail, use Eudora, use anything but the standard from Microsoft. You are presenting a large, slow moving target to a bunch of virus vultures who are only too happy to take shots at the largely uncaring, overcomplicated software from Redmond.
Another thought - don't blame your buyers for sending you the virus. They aren't doing it intentionally, since the virus writers exploit the numerous holes in Microsoft's buggy products to automatically raid Outlook's address book and propagate rapidly on its own.
Terry
=============From The Register=============
BadTrans.B uses a known exploit, related to the processing of certain unusual MIME types, in certain versions of Outlook Express 5 so as to launch an attachment automatically. The trick, which was also used by the authors of the Nimda worm, means simply previewing an infected email is enough to get infected. Users who double click on an infected attachment also risk infection.
posted on December 4, 2001 01:27:18 PM new
Quick lesson in Virus Protection. Many viruses use Microsoft Outlook to gain access to your computer.
Lesson one, DO NOT USE OUTLOOK. There are dozens of great email programs out there. I am using Eudora, and it is great.
Lesson two, Use Webmail if you can. Most webmail servers (such as hotmail, mail.com, so on) have their own built in Virus Protection program, and they prevent you from downloading any virus that they know about. They also update daily (or more often if needed) due to the number of users and the possibility of lawsuits. I've been Auctioning on Ebay since 1996, and I've not gotten one virus yet...
Lesson three, Get a macintosh! Most viruses are written for Windows, and macs are immune. I use a Mac at work and a PC at home.
Last, but not least. NEVER OPEN A FILE UNLESS YOU WERE TOLD BY THE PERSON IN ANOTHER EMAIL THAT THEY WERE GOING TO SEND IT TO YOU. Just because someone says, "Take a look at this." does not mean it is safe. However, if you are having a dialogue with someone, and they say, "I am going to send you a picture, file, or whatever" you can probably open that up safely.
Never open an unextected file.
With a little caution, you can avoid Viruses. I went from 1996 to 2000 with no virus protection software, and never got a virus. I was given Norton as a gift, so I have it now. I've never had to use it (however, I do keep it up to date).
