W32.BadTrans virus question (Outlook 2000)

Topic

New Reply

My Norton AV intercepted an e-mail with the W32.Badtrans virus attached to it. That’s the good news. However, for some reason Outlook 2000 was affected and I ended up having to re-install it twice before it was functional again. I am also having other sporadic and unexplicable problems as well. My AV definitions are up to date, I’ve done a complete system scan with Norton and an online AV program too just to double check and nothing was found.

To give you a bit more information about what Outlook was doing after the intercept, it would stop receiving e-mail at the point of intercept and then render an error saying it lost connection to the server. If I restarted it and clicked to receive e-mail, it would download the exact same messages and then intercept the infected one again. It did this 4 times before I gave up and shut things down completely.

So, anyone had a similar event happen to them? Any guesses as to what happened and why I continue to have various and sporadic problems running programs, rebooting etc?

Thanks,

Jeff

Reply | Quote

Replies

are you using email scanning? if so, maybe the problem was in NAV, not outlook.

did the virus run?

Reply | Quote

Yes, I’m running the Norton AV w/ e-mail protection. After finally giving up Quarantining and Deleting the infected attachment because nothing could be received after doing so, I allowed the infected e-mail to pass through. But there was no attachment?? And, like I said, I ran a complete system scan with both Norton and “Housecall” online and nothing was detected.

Jeff

Reply | Quote

> there was no attachment

The attachment is either .SCR or .PIF; if you have the Outlook security patch (or SP2), it might be blocked rather than stripped.

Reply | Quote

it would not be blocked if using NAV email scanning. The attachment should have been removed by the scanner. if hte message is still in the inbox, it should be deleted, although it shouldn’t be the cause of the problems. (i get some 15 per day and my AV reoves them without problems)

Reply | Quote

Thanks for that additional information. I more than likely have the Outlook “security patch” which you referred to, although I don’t usually install the majority of MS’s security patches for various and obvious reasons.

Jeff

Reply | Quote

I also had some problems with this virus and Outlook in spite of NAV – though not exactly the problems you describe.
This virus affected my program via the preview pane, which I have now turned off in all folders (the messages – also with no visible attachment – crashed the program every time I clicked on it to try to delete them).

If you run into future problems with messages while downloading, and if you have a pop3 mail account, you can access your account through a website at http://www.mail2web.com and delete the offending e-mail directly from your server so you don’t have to download it onto your own computer. I have done this successfully in the past.

Hope this helps in the future if its too late for this time.
-cynthia

Reply | Quote