New Widespread Virus

[Jason]

Haven't seen any info on it yet, but there is another major virus making its rounds on the web. It seems to be similar to the "I send you this file in order to have your advice" virus, except it replies to old messages instead of simply mailing to your contacts, and begins to force a download when mail is viewed. So if something starts to download by itself, make sure you hit cancel. It's Probably a good idea to update your virus definitions if you haven't already. I've received this virus about 60 times so far today via email.

[Jason]

I've found some news on the topic. It appears the virus is called BadTrans.B.More info can be found here:
http://news.cnet.com/news/0-1003-200-7979449.html?tag=mn_hd

It confirms that it is indeed a variation of the previous virus well all knew and loved. This one installs a keylogger on your system to track what you type.

[scoutt]

yes I jsut recieved this from Mcafee.

McAfee.com has received an increasing number of reports from home users with a new variant of Badtrans, referred to as Badtrans.b. AVERT has raised the Risk Assessment on this
variant of W32/Badtrans@MM to HIGH RISK FOR CONSUMERS.

VirusScan and other McAfee products with DAT files 4172 and
higher are protected from this variant.

W32/Badtrans@MM is a mass-mailing worm that drops a
remote-access Trojan. The virus arrives via the Microsoft
Outlook email program and attempts to send itself by replying to unread email messages.

The email may contain the text "Take a look to the attachment"
in the message body and will contain an attachment that is
13,312 bytes in size. The attachment name is created in
three sections, for example, card.doc.pif.

For detection and removal instructions for the
W32/Badtrans@MM virus, click here.
===> http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2608

[SteveS235]

Originally posted by Jason
Haven't seen any info on it yet, but there is another major virus making its rounds on the web. It seems to be similar to the "I send you this file in order to have your advice" virus, except it replies to old messages instead of simply mailing to your contacts, and begins to force a download when mail is viewed. So if something starts to download by itself, make sure you hit cancel. It's Probably a good idea to update your virus definitions if you haven't already. I've received this virus about 60 times so far today via email.

Yep. I got this one last week. I don't remember the details, but I think it had something to do with a picture of Chandler from the show "Friends".

[pixelmonkey]

i think this virus is a killer, as it seems microsoft and cert.org have both been hit... possibley the reason they are down?

chris<pixelmonkey>:monkey:

[Dave Swift]

I looked at an email with an attachment in my Outlook Express preview pane and in less than a second, it downloaded itself onto my PC. :eek:

It then mailed itself to everyone who had an email in my Inbox. Now as you possibly know, I'm selling my site and domain name, etc, so some of the emails I had were from prospective buyers.

The worst thing is, it is on my PC and my virus pro. cannot find it! (Whenever I connect to the internet, it opens Outlook Express.)

So, any advice for what I should do?

I went to the link Steve suggested, but McAfee seem only interested in extracting cash from me....

[Option1]

Originally posted by Dave Swift
I looked at an email with an attachment in my Outlook Express preview pane and in less than a second, it downloaded itself onto my PC. :eek:

It then mailed itself to everyone who had an email in my Inbox. Now as you possibly know, I'm selling my site and domain name, etc, so some of the emails I had were from prospective buyers.

The worst thing is, it is on my PC and my virus pro. cannot find it! (Whenever I connect to the internet, it opens Outlook Express.)

So, any advice for what I should do?

I went to the link Steve suggested, but McAfee seem only interested in extracting cash from me.... Dave, you're really going to have to get a good antivirus program if your current one won't find it. Personally, I recommend Nortons.

I don't know if you can still get a freebie of Nortons or not anymore, but I know you now have to pay to update the virus definitions. Either way, I recommend you actually spend the $ and buy Nortons, at $30 or less it's pretty damn cheap. It can even be set to update virus definitions automatically so you don't need to remember to do it yourself all the time.

It's already saved my butt a couple of times in the latest outbreak of scriptkiddies (pathetic ignorant little losers) and their nasty little virus efforts.

Neil

[scoutt]

you can get a evaluation version from mcafee, 38Mb d/l

free...

[Jason]

Go to this page:
http://www.mcafee.com/myapps/clinic/vso/default.asp

Click "take a test drive" under "Scan".

[SteveS235]

Here's one way to get rid of it:

http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BADTRANS.B

Dave, you can also get a free scan here:

http://housecall.antivirus.com/housecall/start_pcc.asp

Antivirus is the site affiliated with my antivirus software, PC-Cillin.

[Mark]

Originally posted by Dave Swift
any advice for what I should do?

I went to the link Steve suggested, but McAfee seem only interested in extracting cash from me.... I recommend getting Norton or McAfee immeditely. I also cam across this free virus scanner:

http://www.grisoft.com/html/us_index.html