birding-aus

Badtrans virus

To:
Subject: Badtrans virus
From: Susan Knowles <>
Date: Mon, 23 Apr 2001 15:26:08 +1000
I can't quite make sense of this for the initial virus spreading at least. I assume most people received, as I did, extracts of old messages that they had sent to birding-aus and all of these came, or appeared to come, from the one person.

How does this fit in with the unread message scenario and how could any virus do this automatically? I can see how the virus can be forwarded once the attachment is opened, but surely the first stage must have been deliberate?


You have to realise that the virus has nothing to do with Birding-Aus, and
the people who sent out poisoned messages didn't do so deliberately, and
they aren't guilty of attaching anything either. The virus generates the
attachment - which is the virus itself.

You can't get the virus by reading ANY email. You will be infected
immediately if you try to open a poisoned attachment. The virus then doesn't
do anything till after your next reboot, when it searches through your Email
system for unread messages, and sends back part of the message to its sender
with the virus attached.

The posioned messages are not from Birding-Aus! They are from people whose
machines have already been infected. Just so happens that most people who
subscribe to Birding-Aus probably have lots of unread messages in their
system, and that's where the virus finds messages to send on.

Cheers, Chris.





Birding-Aus is on the Web at
www.shc.melb.catholic.edu.au/home/birding/index.html
To unsubscribe from this mailing list, send the message
"unsubscribe birding-aus" (no quotes, no Subject line)
to 

--
Susan Knowles
Birding-Aus is on the Web at
www.shc.melb.catholic.edu.au/home/birding/index.html
To unsubscribe from this mailing list, send the message
"unsubscribe birding-aus" (no quotes, no Subject line)
to 


<Prev in Thread] Current Thread [Next in Thread>
Admin

The University of NSW School of Computer and Engineering takes no responsibility for the contents of this archive. It is purely a compilation of material sent by many people to the birding-aus mailing list. It has not been checked for accuracy nor its content verified in any way. If you wish to get material removed from the archive or have other queries about the archive e-mail Andrew Taylor at this address: andrewt@cse.unsw.EDU.AU