From: Michael Edwards (mje_at_foxall.com.au)
Date: Sun Dec 02 2001 - 01:49:08 EST
Michael Edwards.
----------------------------------------
[Marc Swanson:]
>This "worm" is one of those that does NOT need to have any attachment opened
>to activate it, all you need do is click-thru to that message in your
>in-box.
..
>http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b_at_mm.html
----------------------------------------
I took a look at this: I didn't understand all of it, because much of the
jargon is over my head - but, as far as I can tell, I have none of the telltale
signs of infection: none of the files mentioned are on my computer, and the
registry entry they suggested removing wasn't there anyway. And I've noticed no
misbehaviour on my computer, except for Outlook Express crashing if I select an
infect e-mail. (I've moved them somewhere where this is unlikely to happen by
accident - but, in case future trouble happens, I've deemed it wise to keep the
messages in question, in case I need to have someone investigate them.)
Clearly what's happened with me is non-standard behaviour for this virus.
Does the fact that it crashed Outlook Express instantly merely on moving the
selection bar to the infected message have any bearing on whether I was infected
or not? Are there definitive symptoms to look out for, which must be present if
I am infected?
Regards,
Michael Edwards.
This archive was generated by hypermail 2.1.3 : Thu Jan 23 2003 - 09:57:54 EST