Meet the Other Phone. Flexible and made to last.

Meet the Other Phone.
Flexible and made to last.

Buy now

Please or to access all these features

Warning - PC Virus

4 replies

Jodee · 27/11/2001 09:12

Carrie/Justine/Rachel/everyone, you may or may not be aware of a pc virus that is doing the rounds. I am mentioning it here as my problem seems to have started when I received what I thought was a reply to an old email I sent to the Mumsnet team, with an attachment. I tried to click on the attachment to open it and it was blank. So if you get an odd email, which may appear to come from a friendly source, starting 'Re: XXXX' with an attachment, DO NOT open it, delete straight away. The virus then sends similar emails to everyone in your addressbook.
My DH has been attempting since yesterday night to sort this problem and we are still working on it.

Tech · 27/11/2001 16:43

Hi, The virus that is doing the rounds at the moment is called W32.Badtrans.B. There is a page that describes it here

The latest versions of Norton AntiVirus, Sophos, McAfee and the other virus checkers can clean this virus from your PC if you suspect you might have it.

Tech · 27/11/2001 16:50

There's more on it here too. You should take steps to get rid of it if you think you may have it as it opens up your computer to control from outside, and also attempts to steal your passwords.

Tech · 28/11/2001 00:00

Once you have received most viruses - if you open the attachment to the message, the computer is affected. Unfortunately, with this particular virus, previewing the message can be enough unless you have a recently fixed version of Microsoft Outlook / Outlook Express installed. If you are running a Windows machine with windows 98 or 2000 on it, you should have a "windows update" icon on your start menu. If you click this, you go to a microsoft website. Click on "Product updates". This should then give you a list of available updates. You should check this periodically, and install anything that Microsoft labels as a "critical update". This is where they put their security patches that close the loopholes that viruses like this exploit.

Unfortunately, once you have the virus on your machine, doing this isn't enough - you need to get an antivirus program and install it to clean the existing infection - or follow the manual removal instructions that are posted on various websites. This last option is not for the faint-hearted though, as it can get tricky.

Also, although it's not necessary to open an attachment in this case, you should be very wary of opening any attachment that ends in one of .exe, .pif, .scr and so on. Some viruses will send an attachment called something.doc.pif hoping you will see the .doc and assume it's a word document whereas in fact it's an executable program file. I'd recommend not ever directly opening attachments, unless you are absolutely sure that you know what it is and that you were expecting it.

Also, this particular virus does something slightly tricky. If you look at the "from" line in the message, it might say "Joe Bloggs", who you know as "[email protected]" for example. However, if you look at the return email address, it will likely be "[email protected]" - in Outlook click on the from line in the message, right click and choose "properties" to display the underlying email address. So even if you or the anti-virus measure at some company responds saying a message is suspect, or got rejected by a virus filter, the inadvertent sender might not see the response and realise something was wrong.

This seems to have been a fairly major problem in the UK over the last couple of days. The BBC are reporting it now too - here. There is also a fairly technical explanation of it at messagelabs, which is one of the services corporations use to scan their incoming email.

Tech · 28/11/2001 12:50

Hi Robinw,
We use the latest version of Norton Antivirus, and it's set up to do live updates of virus definitions. However, a problem on Rachel's computer prevented the most recent update from "taking", so the virus slipped through. By the way, we don't maintain a central address book. Our membership records are on a secure Unix server that is not accessible to anyone's email or any user, so it wasn't compromised at any time. The people who appear to have got messages from Rachel are people she had corresponded with personally about competition prizes and so on.

Regards,
Steven

Watch this thread for updates

Tap "Watch" to get all the latest updates

End of posts

There are no more MNHQ posts on this thread