Declan, Uwe (and others), The virus is probably the back burner virus. It infects through Outlook (express) using an attachment which looks like an image file or something non-executable but with an additional executable extension which allows it to run. It then emails itself to addresses in the address book with a sender's address which is invented by joining together parts of 2 entries in the address book. Thus any attempt to warn the infected person will fail. My wife received an email which somehow evaded deletion although it was recognised by antivirus software. It then shut down Norton Antivirus and I was unable to update virus definitions or carry out virus checks since Norton Antivirus would close shortly after being started. Rebooting did not help. I downloaded an executable from Symantec to remove the virus but it also would not run properly and I eventually had to boot up W98 in safe mode to get it to work. The result was that 2 files were deleted from the computer and a registry entry removed. The computer now works and appears to be clean with NAV running normally.
This is a very ugly customer and the first one to have got through since I started using the antivirus software. Bob Mitchell On Sat, 2002-10-05 at 21:38, Uwe Zimmermann wrote: > that's a starnge one. Neither of the major antivirus sites seems to > have this particular file in their list. In the standard settings of > Outlook the attachment would just appear as Fal1.bmp and stupid users > might just click it to open an image, well, stupity has to be > punished... > My project supervisor got 4 copies of Navidad this week from a > collegue's computer at home. I thought this virus was already extinct, > but there are still fools around without recent antivirus programs and > ServicePacks on their Windows computers.... > > Uwe. > > > Declan Moriarty wrote: > > > > I got this Saturday. Does anyone know how I can identify which virus it is? I kind >of lose touch, and count of the different > > viruses. The content makes no sense to me at all. I presume it's random content >picked up > > > > Needless to say I removed the virus file from this e-mail, but I can send it if >anyone has an interest > > > > ---------- Forwarded blurb and trivia on FAO Naomi&Leah. ---------- > > > > Hi Guys, > > > > Shouldn't be a problem, I should see Jules during the week. The only thing > > is that she's a bit skeptical about prescribing unless she's checked your > > blood pressure. I know you've been using Minulet for a while and don't have > > any problems with it but has Leah used it before or is she just > > experimenting!! > > > > Attached was This filename="Fal1.bmp.pif" > > > -- > Author: Uwe Zimmermann > INET: [EMAIL PROTECTED] > > Fat City Network Services -- 858-538-5051 http://www.fatcity.com > San Diego, California -- Mailing list and web hosting services > --------------------------------------------------------------------- > To REMOVE yourself from this mailing list, send an E-Mail message > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in > the message BODY, include a line containing: UNSUB CHIPDIR-L > (or the name of mailing list you want to be removed from). You may > also send the HELP command for other information (like subscribing). > -- Author: Robert Mitchell INET: [EMAIL PROTECTED] Fat City Network Services -- 858-538-5051 http://www.fatcity.com San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB CHIPDIR-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
