With this type of virus it would be wise to download and apply a patch for
the security hole left open by certain versions of Internet Explorer (5.01
and 5.5). Without the patch, an email message in H T M L format can execute
a virus simply by opening the email and viewing it. Virus infection made
easy! No need to open an email attachment.
See the Microsoft Security bulletins that discusses this vulnerability at:
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-020.asp
and
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/
bulletin/MS01-027.asp
The patch for MSIE 5.01 can be downloaded from this Microsoft site:
http://www.microsoft.com/windows/ie/downloads/critical/q295106/default.asp
The patch for MSIE 5.5 can be downloaded from this Microsoft site:
http://www.microsoft.com/windows/ie/downloads/critical/q299618/default.asp -
Jon
-----Original Message-----
From: Daniel Burton [mailto:[log in to unmask]]
Sent: Saturday, December 01, 2001 9:14 AM
To: VICUG-L: Visually Impaired Computer Users' Group List
Cc: Steuerwalt, Jon C.
Subject: Re: WARNING: message to [log in to unmask] was rejected!
This is why it is of the utmost importance to keep your virus definitions up
to date.
----- Original Message -----
From: "Fitzgerald-pisp" <[log in to unmask]>
To: <[log in to unmask]>
Sent: Saturday, December 01, 2001 12:39 AM
Subject: Fw: WARNING: message to [log in to unmask] was rejected!
> Sorry guys looks like a caught a virus!!! I hope your were not
> infected as well.
>
> John
>
>
> ----- Original Message -----
> From: "CWIS Tech Support" <[log in to unmask]>
> To: <[log in to unmask]>
> Sent: Friday, November 30, 2001 10:30 PM
> Subject: WARNING: message to [log in to unmask] was rejected!
>
>
> [log in to unmask],
>
> An email you sent to [log in to unmask] was rejected by our mail
> delivery
> system. It had a virus attached to it. It is up to you to clean
> your system.
>
> Virus Info:
> Found the W32/BadTrans@MM virus !!!
>
> If you are running Virus scanning software on your desktop you
> will need to update your software scan and clean your
> system of viruses so that you can continue to send email to
> [log in to unmask] If you have problems doing this you can contact
> your ISP, Network Admin or Family Computer Guru. We would
> also recommend that you run "Windows Update" and make sure
> you have the latest security patches from Microsoft.
>
> Check out http://housecall.antivirus.com/ for some free antivirus
> software.
>
> Thanks,
> [log in to unmask]
>
> CWIS Internet Services
> 203 North Broadway
> Stigler, OK 74462
>
> NOTE: If you are reading this you either have a virus or
> forwarded one via email to a user at cwis.net.
>
> For your reference, here are the headers from your email:
> ------------------------- BEGIN HEADERS -----------------------------
> MAIL FROM:<[log in to unmask]>
> RCPT TO:<[log in to unmask]>
> DATA
> Received: from mta5.rcsntx.swbell.net ([151.164.30.29])
> by av.cwis.net with esmtp (Exim 3.15 #1)
> id 16A1n2-0006y7-00
> for [log in to unmask]; Fri, 30 Nov 2001 22:30:12 -0600
> Received: from aol.com ([65.67.203.49]) by mta5.rcsntx.swbell.net
> (iPlanet Messaging Server 5.1 (built May 7 2001))
> with SMTP id <[log in to unmask]> for
> [log in to unmask];
> Fri, 30 Nov 2001 22:07:37 -0600 (CST)
> Date: Fri, 30 Nov 2001 22:06:51 -0600 (CST)
> Date-warning: Date header was inserted by mta5.rcsntx.swbell.net
> From: Fitzgerald-pisp <[log in to unmask]>
> Subject: Re: WARNING: message to [log in to unmask] was rejected!
> To: [log in to unmask]
> Message-id: <[log in to unmask]>
> MIME-version: 1.0
> Content-type: multipart/related;
> boundary="Boundary_(ID_ZrUzC/0SXfYk6ARLp9t4EQ)";
> type="multipart/alternative"
> X-Priority: 3
> X-MSMail-priority: Normal
> X-Unsent: 1
> X-AntiVirus: CWIS Internet Anti-Virus Server
> -------------------------- END HEADERS ------------------------------
>
>
> VICUG-L is the Visually Impaired Computer User Group List.
> To join or leave the list, send a message to
> [log in to unmask] In the body of the message, simply type
> "subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
> VICUG-L is archived on the World Wide Web at
> http://maelstrom.stjohns.edu/archives/vicug-l.html
>
>
VICUG-L is the Visually Impaired Computer User Group List.
To join or leave the list, send a message to
[log in to unmask] In the body of the message, simply type
"subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
VICUG-L is archived on the World Wide Web at
http://maelstrom.stjohns.edu/archives/vicug-l.html
VICUG-L is the Visually Impaired Computer User Group List.
To join or leave the list, send a message to
[log in to unmask] In the body of the message, simply type
"subscribe vicug-l" or "unsubscribe vicug-l" without the quotations.
VICUG-L is archived on the World Wide Web at
http://maelstrom.stjohns.edu/archives/vicug-l.html
|
