I agree with Robert Mitchell.
I got a copy of that turkey about two days ago. Fortunately I recognized
the bogus extension before opening it and simply deleted the message
It looks like some @$$%^&*#% has let it out of magnetic containment and
loosed it on the web again. It got by NAV online scan without detection.
NAV appears to still be alive and well here. My NAV was updated online only
5 days ago?
Bob Smith
--- Avoid computer viruses, Practice safe hex ---
-- Specializing in small, cost effective
embedded control systems --
Robert L. (Bob) Smith
Smith Machine Works, Inc.
9900 Lumlay Road
Richmond, VA 23236 804/745-1065
[EMAIL PROTECTED]
----- Original Message -----
To: "Multiple recipients of list CHIPDIR-L" <[EMAIL PROTECTED]>
Sent: Saturday, October 05, 2002 8:38 AM
> Declan, Uwe (and others),
>
> The virus is probably the back burner virus. It infects through Outlook
> (express) using an attachment which looks like an image file or
> something non-executable but with an additional executable extension
> which allows it to run. It then emails itself to addresses in the
> address book with a sender's address which is invented by joining
> together parts of 2 entries in the address book. Thus any attempt to
> warn the infected person will fail.
> My wife received an email which somehow evaded deletion although it was
> recognised by antivirus software. It then shut down Norton Antivirus and
> I was unable to update virus definitions or carry out virus checks since
> Norton Antivirus would close shortly after being started. Rebooting did
> not help.
> I downloaded an executable from Symantec to remove the virus but it also
> would not run properly and I eventually had to boot up W98 in safe mode
> to get it to work. The result was that 2 files were deleted from the
> computer and a registry entry removed.
> The computer now works and appears to be clean with NAV running
> normally.
>
> This is a very ugly customer and the first one to have got through since
> I started using the antivirus software.
>
> Bob Mitchell
>
> On Sat, 2002-10-05 at 21:38, Uwe Zimmermann wrote:
> > that's a starnge one. Neither of the major antivirus sites seems to
> > have this particular file in their list. In the standard settings of
> > Outlook the attachment would just appear as Fal1.bmp and stupid users
> > might just click it to open an image, well, stupity has to be
> > punished...
> > My project supervisor got 4 copies of Navidad this week from a
> > collegue's computer at home. I thought this virus was already extinct,
> > but there are still fools around without recent antivirus programs and
> > ServicePacks on their Windows computers....
> >
> > Uwe.
> >
> >
> > Declan Moriarty wrote:
> > >
> > > I got this Saturday. Does anyone know how I can identify which virus
it is? I kind of lose touch, and count of the different
> > > viruses. The content makes no sense to me at all. I presume it's
random content picked up
> > >
> > > Needless to say I removed the virus file from this e-mail, but I can
send it if anyone has an interest
> > >
> > > ---------- Forwarded blurb and trivia on FAO Naomi&Leah. ----------
> > >
> > > Hi Guys,
> > >
> > > Shouldn't be a problem, I should see Jules during the week. The only
thing
> > > is that she's a bit skeptical about prescribing unless she's checked
your
> > > blood pressure. I know you've been using Minulet for a while and don't
have
> > > any problems with it but has Leah used it before or is she just
> > > experimenting!!
> > >
> > > Attached was This filename="Fal1.bmp.pif"
> > >
> > --
> > Author: Uwe Zimmermann
> > INET: [EMAIL PROTECTED]
> >
> > Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> > San Diego, California -- Mailing list and web hosting services
> > ---------------------------------------------------------------------
> > To REMOVE yourself from this mailing list, send an E-Mail message
> > to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> > the message BODY, include a line containing: UNSUB CHIPDIR-L
> > (or the name of mailing list you want to be removed from). You may
> > also send the HELP command for other information (like subscribing).
> >
>
>
> --
> Author: Robert Mitchell
> INET: [EMAIL PROTECTED]
>
> Fat City Network Services -- 858-538-5051 http://www.fatcity.com
> San Diego, California -- Mailing list and web hosting services
> ---------------------------------------------------------------------
> To REMOVE yourself from this mailing list, send an E-Mail message
> to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
> the message BODY, include a line containing: UNSUB CHIPDIR-L
> (or the name of mailing list you want to be removed from). You may
> also send the HELP command for other information (like subscribing).
>
--
Author: Robert Smith
INET: [EMAIL PROTECTED]
Fat City Network Services -- 858-538-5051 http://www.fatcity.com
San Diego, California -- Mailing list and web hosting services
---------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: [EMAIL PROTECTED] (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB CHIPDIR-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
