S. Ring has badtrans virus

From: Lawrence Walker <lgwalker_at_mts.net>
Date: Thu Nov 29 13:26:10 2001

 I got it as well this a.m. It used the "re: re: a2gs on harddisk30 thread. I
use Pegasus and don't open attachments or fomatted msgs which
occasionally also turn up on the list. Curious, I attempted to "View" the
audio docs/doc.pif file and stupidly pressed "Open" instead. It ran and I got
several out of memory windows and an illegal operation/close program one.
 My Norton came up blank since, of course, it's a new virus. Checked my
classiccmp folder and saw Allisons heads-up which gave the identity.
 The Sophus site descibed it and how to remove it. Searched my HD and
sure enough kernel32.exe and kdll.dll were there. They have to be removed
by dos since they're locked in Windoze. It also usually puts an entry in the
registry according to Sophus, but wasn't in mine since I hadn't opened it by
the usual route or something. What a pain in the butt. Sophus says it's the
top worm at present.

lawrence
> > It was sent to me 'personally', ie not as a classiccmp post. Since it
> >was an unsolicited attachment from an unacknowledged source, it filed it
> >in /dev/nul.
>
> I got it as well but followed the same logic you did. I also
> received the virus once over the weekend as well, but it wasn't from
> a list subscriber. I don't use Outlook on my Mac's and don't have
> autopreview turned on when I'm using it under NT.
>
> Jeff
> --
> Home of the TRS-80 Model 2000 FAQ File
> http://www.cchaven.com
> http://www.geocities.com/siliconvalley/lakes/6757



Reply to:
lgwalker_at_mts.net
Received on Thu Nov 29 2001 - 13:26:10 GMT

This archive was generated by hypermail 2.3.0 : Fri Oct 10 2014 - 23:34:13 BST