thought you should know

by El Gato Feo <dlmaraz(at)pacbell.net>

Date:	Mon, 26 Nov 2001 09:38:19 -0800
To:	Victor <v.orellana(at)mailcity.com>, MMieux1109(at)aol.com, "Miguel ." <mjohns2(at)hotmail.com>, Marius Sindilaru <mariusonline(at)yahoo.com>, Maartje Burman <maartjebu(at)hotmail.com>, "Luis O. Chamale" <luisc67(at)hotmail.com>, John Fino <compman(at)ucla.edu>, Jim Vega <jvega1(at)socal.rr.com>, Jami <designsbydusty(at)tiadon.com>, James Foote <cremenoir(at)hotmail.com>, Jacqlyn Wells <jacqlyn(at)mediaone.net>, Hector licon <hectorlicon(at)hotmail.com>, Gudi Weisberg <twogudi(at)yahoo.com>, Esteban Morales <spanishmedia(at)earthlink.net>, D BEST <dbest4u2(at)yahoo.com>, Bruce <akivatyler(at)hotmail.com>, Beverly Washington <bbijane(at)mediaone.net>, Albertina <albertina9jesus(at)netvigator.com>
Cc:	Marvin Aldredge <dreagea(at)hotmail.com>, M K Stephens <MStephens(at)interland.com>, KENNY Tokar <k_tokar(at)mediaone.net>, jesus marie <y1pichi(at)hotmail.com>, James <mpwr97(at)hotmail.com>, holly(at)shaltzfarm.com, Erick Cardona <eacard(at)yahoo.com>, Eric Wiseman <exiled76(at)hotmail.com>, "Chavez, Anita A" <anita.a.chavez(at)intel.com>, "CA.Milton" <camilton(at)hauntedhalloweencastle.com>, Aunt Cissy <ccampos(at)unm.edu>, Arnaldo <shrike7(at)yahoo.com>, Andre Crane <andre(at)terracrane.com>
	todo: View Thread, Original

Hi You guys;

 I've been receiving emails with a new worm attached that was bypassing
 my anti-virus software, although it will be caught with the latest
 updates (available today, 25 Nov.) The attached files do have a double
 extension, so if your email software prohibits opening these sorts of
 files you should be o.k.

 However, the infected file might come with the name "ME_NUDE"
 DO NOT OPEN IT!!.
 ;-) So beware.

 I've attached info on it below.

Win32.Badtrans was discovered on 24 Nov 2001.
 This worm always comes with an attached file with one of the
 following names:

                      HUMOR
                      DOCS
                      S3MSONG
                      ME_NUDE
                      CARD
                      SEARCHURL
                      YOU_ARE_FAT!
                      NEWS_DOC
                      IMAGES
                      PICS

  Each file has a double extension, consisting of:
 .DOC .MP3 .ZIP

 coupled with:
 .pif .scr

 So a typical file might look like:
 HUMOR.MP3.SCR

  Unless you have updated your virus signature files on 25 Nov. or
  afterwards, your anti-virus program will probably not recognize or
  intercept these files.

  DO NOT OPEN THESE ATTACHMENTS!
Simply delete any email you get like  this.

  If you think that you might have already received an email like this
  and opened it, the following sites have information about the virus
  and how to clean it from your system:

 Symantec:
         http://www.symantec.com/avcenter/venc/data/w32.badtrans.b(at)mm.html

Computer Associates:
         http://www3.ca.com/solutions/collateral.asp?CT=65&ID=1136


hope this helps
tataa
dave


****************************************************************************
**********************************************************************
El Gato Feo Web Productions
dlmaraz(at)pacbell.net
Web Design and Development.  Affordable Solutions to the Internet and
E-Commerce
David V Almaraz, Los Angeles, Ca
+1-323-665-0928

HTML: hwg-basics mailing list archives, maintained by Webmasters @ IWA