RE: Radsafers & the Badtrans virus alerts

["Neil, David M" <neildm@ID.DOE.GOV>]

I got one that matched a post I had made to Radsafe, but that looks like

coincidence now.



In my case, the attachment had been munged up and it looked like a blank

email.  When somebody else mentioned it, I opened it a different way, to see

the raw data and found it was supposed to have a file with a [dot]scr

(VBScript?) suffix.  Our cybersecurity folks have it now.



Dave Neil   neildm@id.doe.gov



-----Original Message-----

From: Bjorn Cedervall [mailto:bcradsafers@HOTMAIL.COM]

Sent: Thursday, November 29, 2001 9:57 AM

To: radsafe@list.vanderbilt.edu

Subject: Radsafers & the Badtrans virus alerts





It is obvious that several (many?) of us at Radsafers got the Badtrans virus



in our email. The combination of an email to Radsafers that I sent 10 days 

ago + "Me nude" didn't make much sense (the email came from an .ru address).



(I killed it of course - on another computer BTW).



http://www.mcafee.com/anti-virus/viruses/badtrans/default.asp?cid=2607



The virus is aggressive and can steal your passwords etc.



I noticed that several other Radsafers got the email with other titles than 

the "DNA & neutral filter elution title" that I had. Therefore I wonder if 

the virus possibly may have made its way to our archives? An alternative 

explanation is that it only picked unread emails for its spreading and some 

of those completely different emails happened to be in the same computer.



My vague virus ideas only,



Bjorn Cedervall      bcradsafers@hotmail.com







_________________________________________________________________

Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp



************************************************************************

You are currently subscribed to the Radsafe mailing list. To unsubscribe,

send an e-mail to Majordomo@list.vanderbilt.edu  Put the text "unsubscribe

radsafe" (no quote marks) in the body of the e-mail, with no subject line.

************************************************************************

You are currently subscribed to the Radsafe mailing list. To unsubscribe,

send an e-mail to Majordomo@list.vanderbilt.edu  Put the text "unsubscribe

radsafe" (no quote marks) in the body of the e-mail, with no subject line.