 |
|
 |
| Tuesday, September 07, 2010
|
| Register Login |
 |
|
|
|
|
Users currently online
|
 |
|
|
|
 |
Membership: |
 |
Latest:
SullyC |
 |
New Today:
0 |
 |
New Yesterday:
0 |
 |
Overall:
53 |
 |
People Online: |
 |
Visitors:
7 |
 |
Members:
0 |
 |
Total:
7 |
Online Now:
|
|
|
|
|
|
|
|
|
|
Welcome to the Viruswarning forums. All your original content has been ported to the new forums as well as new content and additional opportunities to interact with the authors of Viruswarn.com. You can always access old content at www.leedrake.com/forum . You may find some formatting was lost in the conversion and the older versions of the posts to be more readable....
But at least it's all here.
Enjoy!
|
|
|
|
|
|
Viruswarn Forums
|
|
|
|
|
| You are not authorized to post a reply.
|
|
| Author |
Messages |
|
Lee Drake
Posts:238
 |
| 05/20/2002 1:26 PM |
|
| Badtrans.b
We have become aware of a variant of the Badtrans virus that has been circulating in recent days, affecting primarily home and small business users.
Like its predecessor, this virus arrives as an attachment with a double extension. Remember, the last extension is the only one that counts!
If you are unsure about an attachment, do not open it.
As always, we recommend that you refrain from opening attachments that you are not expecting to receive. In other words, unless somebody tells you in advance that they will be sending you an attachment, don't open it!
Network Associates, Inc., makers of McAfee VirusScan posted a notice at http://vil.nai.com/vil/virusSummary.asp?virus_k=99069, which says in part:
"AVERT has raised the Risk Assessment on the Badtrans.b variant to Medium On Watch for corporate users and High for home users. We have received many reports that the virus is being seen and stopped at corporate gateways and mailservers. However, we continue to get reports from the home user segment that they have become infected. This is due to the fact that home users tend to update their DAT files less frequently and often do not have VirusScan configured to scan compressed files which is required for detection."
Symantec has a similar notice at http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html which also provides detailed removal instructions.
The Wall Street Journal and InfoWorld, a computer industry newspaper, also report that the virus is spreading world wide, affecting mostly home users.
What To Do
In addition to current signature files, you must enable scanning of compressed files. We strongly encourage you to leave this setting enabled permanently.
By default, this setting is enabled for Norton Anti-Virus, though it may have been changed and is worth checking.
By default, this setting is disabled for McAfee VirusScan.
Below are instructions for enabling this setting for Norton Anti-Virus and McAfee VirusScan.
Additional Safety Measures
If you have not done so, you should apply the latest updates to Microsoft Internet Explorer and Outlook Express. The current version of Internet Explorer and Outlook Express is 6.0, though version 5.5 SP 2 is still supported and in wide use. You can update to version 6 at the Windows Update server, http://windowsupdate.microsoft.com or to version 5.5 SP 2 at the Internet Explorer Web site at http://www.microsoft.com/windows/ie/downloads/archive/default.asp.
Norton Anti-Virus 2002
Thanks to Lee Drake for the following instructions.
1) Double click the Norton icon on your taskbar.
2) Click the Options button.
3) Click on Auto-Protect.
4) Be sure either :
A) Comprehensive file scanning is checked OR
B) Custom file scan is checked and all potential compressed file formats are selected
(arc, arj, b64, bhx, cab, gz, hqx, lzh, mim, tar, taz,tgz, tz,uu, uue, xxe, z)
The options may be in a different place in other versions of Norton, but the process remains basically the same.
We specifically encourage Norton users to upgrade to Norton 2002, since it scans both incoming and outgoing email.
McAfee VirusScan
1
Right Click on the VShield icon. It's the little purple shield near the right end of your task bar.
2
Choose Properties from the context menu that displays.
3
Choose System Scan from the list of property sheets that displays. The System Scan Properties window displays.
4
Make sure that the box marked Compressed files is checked. By default, this function is disabled. We strongly recommend that you enable it and leave it that way.
5
In the vertical panel on the left side of the System Scan Properties window, click the Download Scan icon. The Download Scan Properties window displays.
6
Make sure that the check boxes marked Enable Internet download scanning and Scan compressed files are both checked. By default, neither is checked.
While you have this screen displayed, you may as well select the All Files radio button for maximum protection. Though this will have a slight adverse effect on your system's overall performance, the cost is cheap insurance against the propagation of viruses in new file types. This is especially true of Internet files.
If you are using Outlook Express or are running the regular version of Outlook in Internet Mail Only (IMO) mode, you must enable Download Scan to have your mail scanned as it's downloaded.
7
Click the Apply button, located in the lower right corner of the window, to save and activate your changes. VirusScan should restart automatically, making the new settings effective immediately.
8
If you use the On Demand Scanner, which you should use to schedule regular complete scans, you should make similar adjustments on the property sheets for each of your scan jobs. These are available from the property pages for each job in the VirusScan Console application. It's the little magnifying glass that is usually right next to the VShield icon in the task bar.
9
To configure the job, click the Configure button near the lower right corner of the Task Properties dialog box.
10
By default, the setting for Compressed Files is disabled. Click the check box to enable it. We strongly recommend that you leave it that way.
11
As discussed above, we recommend that you select the Scan All Files radio button, too. If you schedule your jobs to run when you aren't using your computer, you won't notice the extra time needed to scan everything.
12
Click the Apply button in the lower right corner to update the properties for this job.
Please reply if you have questions or need help, or obtain qualified professional assistance locally.
This concludes this VirusWarning announcement.
Lee Drake, Moderator |
|
|
|
|
|
| You are not authorized to post a reply. |
|
|
|
ActiveForums 3.6
|
|
|
|
|
|
|
|