Hello jlaikan,

On Sun, 8 Feb 2004 08:24:04 +0400 GMT (08/02/2004, 11:24 +0700 GMT),
jlaikan wrote:

> ***********************
> A virus (WORM_MYDOOM.A) was detected in the file
> (text.zip/text.scr). Action taken = remove
> ***********-***********
> The message contains Unicode characters and has been sent as a binary attachment.

> My question is what removed the virus?
> 1) The Bat!

No.

> 2) My Norton Anti-virus?

Maybe. But you would know, as you would have set it to behave that
way.

> 3) The server of my ISP?

Your ISP or any ISP on the way, is my guess. I get such messages as
well, you see, and I am quite happy that ISPs delete/remove viruses.
(Might be annoying for AV software developers, as they cannot send
themselves test files, though.) As many users, not only at home but
also in offices, do not keep their AV software updated and click on
any attachement that says "click here", action by the ISPs is the
only way to stop the rapid spread of viruses, IMHO.

> The sender's e-mail address  is [EMAIL PROTECTED] .I don't
> know them and have never sent them any message. How did they get my
> e-mail address?

That was most likely not the sender, but the virus on the infected
computer (and you cannot know what computer that is) will have had
this address on the HD. Very much like your address was found.

-- 

Cheers,
Thomas.

Moderator der deutschen The Bat! Beginner Liste.

Ein 147 Jahe altes Peusenbrot an Schulkinder verteilt. *

Message reply created with The Bat! 2.03 Beta/51
under Chinese Windows 98 4.10 Build 2222 A 
using a Pentium P4 1.7 GHz, 256MB RAM




________________________________________________
Current version is 2.02.3 CE | "Using TBUDL" information:
http://www.silverstones.com/thebat/TBUDLInfo.html

Reply via email to