[ADMIN] Virus Warning

[Guest guest]

Hello All:

 

This is not an issue for you here on the list, since I have my lists set to

reject

all attachments; however, since there has been a problem with an infected member

on one of them, I felt I needed to comment on this particular virus in case you

belong to a list that accepts attachments, or you get one of these attachments

in

your email. This is especially important if you are running MS Internet

Explorer,

since that seems to be the weak link that many virus programmers exploit.

 

A word to the wise, once again... don't open ANY unsolicited attachments, no

matter how benign they appear and no matter where they come from. People who

have

too much time on their hands are out there designing new viruses every day. If

you have a question about the veracity of a virus warning, please send me the

info

offlist and I can check for you to see if it is a hoax or not; or visit

http://antivirus.about.com and type the name of the virus into the search box.

Please do not send warnings directly to the list. If it is a legitimate problem

the moderators will review it and pass it along to the membership.

 

Thanks!

Caroline

 

INFO ON THE VIRUS:

*******************

INETD.EXE or W32.BADTRANS.13312

 

This is considered to be a prolific, but low risk virus, with no " payload " other

than replicating itself.

 

It inserts a file into: C:\WINDOWS\WIN.INI

Called: C:\WINDOWS\INETD.EXE

It is in the run command and needs to be deleted from your

win.INI file and then run a virus scan/repair program &

you're fine.

 

It arrives as an attachment.

The attachment can have one of the following names -

 

Pics.ZIP.scr,

images.pif,

README.TXT.pif,

New_Napster_Site.DOC.scr,

news_doc.scr,

hamster.ZIP.scr,

YOU_are_FAT!.TXT.pif,

searchURL.scr,

SETUP.pif,

Card.pif,

Me_nude .AVI.pif,

Sorry_about_yesterday.DOC.pif,

s3msong.MP3.pif,

docs.scr,

Humor.TXT.pif, fun.pif

 

This virus is a " worm " that will display a " File data corrupt "

message. When your computer is restarted, it will wait for 5

minutes, find all unread email messages and reply to all of

them, attaching the virus to the email.

 

There is info at Trend Micro regarding this trojan program and how to remove it

if

you are infected:

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_BADTRANS.A

 

**********

--