Forum Archive Index - November 2001

["andrew cottingham" <arco@adinfinitum.co.nz>]

Good Morning all

Hope this might further help anyone who has been caught, or who gets caught
today. (I have received a further 4 Badtrans e-mails this morning).

>From my colleague....................

Things have moved along since I emailed yesterday morning (well I tried to
keep that e-mail as plain English as possible but it didn't work) and I now
have further information.

Symantec have further updated their information about the removal of the
BadtransII virus in an easy to read, follow and do format and can be found
here: http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html
Removal is rather easy.

 However, the exploit that allows the attachment (in this case the
BadtransII virus) by only reading an e-mail is a serious one. Outlook
Express comes as part of Internet Explorer and IE 5.01 Service Pack 2, IE6
appear to be safe. If you have another version such as IE5.0, IE 5.01 SP1 or
IE5.5 you should consider the patch available here:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-027.asp
Or an upgrade to Internet Explorer 6 either off a CD that comes with a
computer mag or here: http://www.microsoft.com/windows/ie/default.asp

Hopefully Microsoft will release a simpler fix in a few days. If they do I
will let you know.

Andrew Cottingham

----- Original Message -----
From: Will Bryant <will@sharechat.co.nz>
To: <sharechat@sharechat.co.nz>
Sent: Wednesday, November 28, 2001 2:05 AM
Subject: Re: [sharechat] just got W32.Badtrans.B@mm


>
> >Can someone link me to the repair tools please.  NAV couldn't fix it,
> >wasn't on their repair tools list.  Anyone?
> Are you sure that you have the very latest virus update?
>
> Someone sent in this URL:
> http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html
>
> The removal instructions listed there for NAV users indicate that the
> latest definitions should handle it for you.
>
> _______________________________________________________________________
> Will Bryant, will@core-dev.co.nz                    cell +64 21 655 443
> http://www.core-dev.co.nz/             Personal: http://carcino.gen.nz/
> ShareChat technical manager                 http://www.sharechat.co.nz/
> [PGP 0x96A7F40A, FP 827F A2A9 C718 106D 8F80  E16E A244 D5F2 96A7 F40A]
>
>
> --------------------------------------------------------------------------
--
> To remove yourself from this list, please use the form at
> http://www.sharechat.co.nz/chat/forum/
>


----------------------------------------------------------------------------
To remove yourself from this list, please use the form at
http://www.sharechat.co.nz/chat/forum/