virus alert - please read

[Guest guest]

Hi all,

 

UCSF employees all received this notice on Tuesday, I'm forwarding it

to you all just because it names a few more web resources about this

particular virus.

 

Thanks and glad to be aboard!

 

Janice

************************************************************************

There were two virus notifications distributed this weekend. Below are

brief descriptions and links to the IDE files sent by Sophos.

 

For more information visit:

http://isecurity.ucsf.edu/virus/top_10_virus.html

 

Descriptions:

 

Troj/PWS-AV is dropped by W32/Badtrans-B worm.

The Trojan logs the user's keystrokes in order to gain privileged

information such as passwords.

 

Sophos IDE: http://www.sophos.com/downloads/ide/pws-av.ide

 

W32/Badtrans-B is a worm which uses MAPI to spread. The worm arrives in

an email message with no message text. The attachment filename is

randomly generated from three parts.

 

Sophos IDE: http://www.sophos.com/downloads/ide/badtranb.ide

 

What you need to do:

 

DO NOT OPEN EMAILS WITH A FILE ATTACHMENT. If you do have anti-virus

protection, update your anti-virus software with the most recent

virus definitions.

 

Sophos: http://www.sophos.com/downloads/ide/ides.zip

McAfee: http://www.mcafee.com

Norton: http://www.symantec.com

 

Sophos anti-virus software is available at no cost to all UCSF users

and affiliates (http://www.ucsf.edu/its/license/sophos.html). For

more information on Sophos contact Keith Kane 476-8763.

 

For other anti-virus software updates, refer to the vendor's website.

 

>Hi everyone,

>

>Yes, folks, I'm sorry to report that my e-mail program was infected with

the virus known as W32.Badtrans.B (AT) mn (DOT) The message itself was blank and

contained an attachment labeled PICS.DOC.scr. It was automatically e-mailed

to everyone in my address book. Please delete it immediately and DO NOT

open the attachment.

>

>Very sorry for the inconvenience.

>

>Rich

>

>PS You can read about this virus and how to fix it at

>http://www.symantec.com/avcenter/venc/data/w32.badtrans.b (AT) mm (DOT) html

[Guest guest]

Hi everyone,

 

Please understand that SFBAVEG does NOT allow attachments to be sent via the

SFBAVEG mailing list. The message that Pete received was an individual

message sent to him from Rich's computer, *not* via .

 

How do I know this? Because I also e-mail with Rich outside of SFBAVEG and

received a blank e-mail with an attachment too (different subject line than

the one Pete received). My Norton Anti-Virus didn't even complain about the

message, I just deleted it because it was empty and I've read other posts in

other groups talking about an e-mail virus.

 

Just FYI.

 

Tammy

 

 

 

Peter L. Cohon [plcohon]

Wednesday, November 28, 2001 1:16 PM

; Howard Dyckoff

virus alert

 

 

A virus infected e-mail, (according to my Norton Anti-Virus), purporting to

come from Rich Ganis, is going around with the subject: Re: veg-sf New

Zealand Group Advocates Fat Tax. I no longer to veg-sf, and I

know Rich would never knowingly send an infected message. I suggest that

you avoid opening the attachment to the e-mail and delete it ASAP.

 

I'd be curious to know who else has received the e-mail in question, and if

anyone knows who's behind this attack.

 

 

 

 

----------------------------

Tell a friend about ! Help our online community grow!

Subscribe: -

Un: -

 

 

 

 

 

 

[Guest guest]

Hi everyone,

 

Yes, folks, I'm sorry to report that my e-mail program was infected with the

virus known as W32.Badtrans.B (AT) mn (DOT) The message itself was blank and contained

an attachment labeled PICS.DOC.scr. It was automatically e-mailed to

everyone in my address book. Please delete it immediately and DO NOT open

the attachment.

 

Very sorry for the inconvenience.

 

Rich

 

PS You can read about this virus and how to fix it at

http://www.symantec.com/avcenter/venc/data/w32.badtrans.b (AT) mm (DOT) html

 

-

" Tammy " <meowthunk

" "

Cc: " Peter L. Cohon " <plcohon

Wednesday, November 28, 2001 1:59 PM

virus alert - please read

 

 

> Hi everyone,

>

> Please understand that SFBAVEG does NOT allow attachments to be sent via

the

> SFBAVEG mailing list. The message that Pete received was an individual

> message sent to him from Rich's computer, *not* via .

>

> How do I know this? Because I also e-mail with Rich outside of SFBAVEG

and

> received a blank e-mail with an attachment too (different subject line

than

> the one Pete received). My Norton Anti-Virus didn't even complain about

the

> message, I just deleted it because it was empty and I've read other posts

in

> other groups talking about an e-mail virus.

>

> Just FYI.

>

> Tammy

>

>

>

> Peter L. Cohon [plcohon]

> Wednesday, November 28, 2001 1:16 PM

> ; Howard Dyckoff

> virus alert

>

>

> A virus infected e-mail, (according to my Norton Anti-Virus), purporting

to

> come from Rich Ganis, is going around with the subject: Re: veg-sf New

> Zealand Group Advocates Fat Tax. I no longer to veg-sf, and I

> know Rich would never knowingly send an infected message. I suggest that

> you avoid opening the attachment to the e-mail and delete it ASAP.

>

> I'd be curious to know who else has received the e-mail in question, and

if

> anyone knows who's behind this attack.

>

>

>

>

> ----------------------------

> Tell a friend about ! Help our online community grow!

> Subscribe: -

> Un: -

>

>

>

>

>

>