PDA

View Full Version : NAV & e-mail attachments



floppybootstomp
01-24-2002, 08:54 AM
My wife recently received an e-mail attachment from a friend of hers, it was a photo of her friend's young kid. Well that kid was carrying the Worms Trans B virus, second time I've been hit with it.

I'm using Ontrack's FixIt Utilities 4.0 atm but can't seem to find a way to check attachments for viruses with it.

I have NAV 2002, can I perform that function with Nortons?

I may just swap if that's the case, or run both and disable Ontrack's proggie until I need it, it does have a great registry cleaning tool.

I'm getting a bit fed up with them viruses :grr:

Techvillage
01-24-2002, 12:30 PM
Flopps - NAV2002 scans incoming and outgoing messages and any attachments.

Alakazam
01-24-2002, 12:34 PM
Right on TV, everything is scanned as it is being downloaded with NAV 2002. Norton has saved my butt several times, it's not a resource hog & has a lot of setup options.

muckshifter
01-24-2002, 01:34 PM
Norton 2002 does indeed scan your email, however, that does not mean you are safe.

DO NOT OPEN ATTACMENTS

Instead ask the sender to "insert" the picture.

Norton says...
Due to the increased rate of submissions, Symantec Security Response has upgraded the threat level of this worm from level 3 to level 4 as of November 26, 2001.

Corporate email filtering systems should block all email that have attachments with the extensions .scr and .pif.

Home users should not open any email that has an attachment in which the second extension is .pif or .scr. Any email that has such an attachment should be deleted.

If Norton AntiVirus detects this in an email message as W32.Badtrans.B@mm.enc (not as W32.Badtrans.B@mm), this is the detection for the MIME-encoded exploit in the body of the email, and it is harmless as long as the attachment has been deleted. We recommend that you delete messages detected as W32.Badtrans.B@mm.enc and notify the person who sent it to you. We also strongly recommend that you run a full system scan to make sure that no other infection exists.

http://www.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.html

floppybootstomp
01-24-2002, 05:11 PM
Problem is, how do I educate the missus :confused:

That particular virus apparently e-mails everybody in your address book taking a pic you've e-mailed previously with the virus embedded. It seems the sender is unaware that's it's even been sent.

(Could be a tad embarrassing if that piccie was, ahem, of a somewhat naughty nature could it not?)

I've asked wife person not to open any attachments now without asking me first and I'll try and show her how to check stuff..

It's the same way I got this damn virus the first time, around last November, it came from a person I trust but they didn't even know they'd e-mailed me, let alone know they had a virus. Thinking about it, that was quite stupid and a bit of a lapse on my part.

The only thing that put me off Nortons was that last year NAV 2001 failed to detect a virus that Fix-It did.

But I think I'll load NAV 2002 and see how I get on.

Only attachments I've ever opened were from one or two of you guys and a few companies. Even attachments from friends I've deleted in the past then phoned them up and asked what the attachment was.

Anyways, thanks again :)

Techvillage
01-24-2002, 05:20 PM
Another things flopps - I think you're running Zone Alarm Pro? Mailsafe in Zone Alarm Pro protects against .scr and .pif amongst others.

Go to

Although Mailsafe isn't an AV, and shouldn't be your only line of defence, it is nice to know it's covering you as well.

Go to Security > Advanced > Mailsafe tab to see all the extensions it protects you against.

floppybootstomp
01-24-2002, 05:39 PM
I just had a look at that and configured it to show me an alert if I get a quarantined attachment.

All this software I got running, sometimes I don't even know what's going on in the background half the time! I should really look around this stuff a little more.

BobBeezer
02-12-2002, 04:18 PM
Flops,
Just put on one of them dresses you love so much, she'll listen to anything you have to say! :P

Seriously tho, NAV 2002 has bailed my ass out of some pinches of late. It's better (IMO) then it's predecesors, and less of s sys hogg. But like Mucks said, don't open attachments peroid, that usually kills worms... dead! :)

BeeZ