Doc

I received two emails today to my website email which contained a virus.

The virus was W32.Badtrans.B@mm I did not download it.

The e-mails were addressed as being from

john piller" <_transport@heltor.co.uk

Kevin Beaumount" <_kevinbeaumount@yorkchambers.co.uk

I have emailed both companies. Both their websites seem genuine.

Is it likely that someone from outside these companies has "hijacked" their email accounts?

john banks

I was sent the same by two different people also yesterday. PC-cillin zapped it nicely. If you are running the latest patches for Outlook Express you are also protected apparently. When I replied to alert the sender both were undeliverable.

DaveD

iTrader: (2)

I got infected by this the other night - apparently older versions of Outlook have a loophole in the s/w which allows the virus to download without needing to open the attachment. Opening the email itself is enough to release the virus!

Also, by using a similar loophole, this virus can be downloaded by older versions of IE from web pages without the user being aware of anything untoward happening!

McAlfee & Norton websites provide some good information on the virus, and how do manually disinfect.

Josh L

My sympathies. I received the same thing from my brother in law yesterday. Fortunately experience, quick reactions and sophos helped sort it out.

John. The reason the emails you sent were undeliverable, so I'm told, is that the virus itself adds an _ to the begining of the email address, thus rendering it invalid. Clever.

First of all, it's not just older versions that allow the virus to activate without opening the attachments. I keep mine up to date, and it got through mine. Fortunately, my best friend builds computers for a number of major companies and government departments, and his almost **** knowledge is occasionally invaluable.

Josh

Doc

I deleted the - before I e mailed back and they haven't bounced back yet.

Presumably these companies have the virus which is now emailing everyone in their address book. I just wonder why these two companies have my web address.