Virus

Polycarp66 at aol.com Polycarp66 at aol.com
Tue Dec 4 10:19:19 EST 2001


In a message dated 12/4/2001 9:39:53 AM Eastern Standard Time, 
theomann at earthlink.net writes:


> Has anyone's computer been infected with this W32/Bad Trans virus, or
> whatever it's called?  Mine has had it twice in spite of having virus
> protection installed.  I hope the nasty thing hasn't used me to infect any
> of you.  My computer wizard son says to be really cautious about opening
> attachments.
> 

I thought the list might be interested in the following from PC Magazine

Virus Alert: BadTrans is Bad News

A malicious security threat is spreading quickly, according 
to new data from virus tracking service MessageLabs. The 
threat, classified as a worm because it spreads via e-mail 
clients, is called BadTrans, and it comes on the heels of 
several damaging and costly viruses and worms seen in 
recent months. 
       MessageLabs runs a free Web-based service called 
Virus Eye, which tracks the occurrences of viruses and worms 
across millions of global messages. As of early last week, 
BadTrans showed up as far and away the most prevalent virus 
or worm tracked, just ahead of the SirCam worm, which has 
been spreading for months. BadTrans infections were occurring 
about 12 times more frequently than SirCam infections, according 
to MessageLabs' numbers. 
  Like other worms, BadTrans spreads through e-mail. It 
targets Microsoft Outlook and Microsoft Outlook Express e-mail 
clients and automatically executes a file attachment to spread 
itself. An advisory from security firm TrendMicro stresses that 
"it does not require the e-mail receiver to open the attachment 
for it to execute." 
       Security firm Symantec upgraded its risk classification 
for BadTrans from level 3 to level 4. An advisory from Symantec 
says: "BadTrans is a MAPI worm that e-mails itself out as one 
of several different file names. This worm also creates a DLL 
in the \Windows\System directory called Kdll.dll. It uses 
functions from this DLL to log keystrokes." The good news is 
that BadTrans is easy to remove.

To read this article, go to
http://eletters1.ziffdavis.com/cgi-bin10/flo?y=eM3E0DXr8f0Evb0bzQ0Ac

gfsomsel
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.ibiblio.org/pipermail/b-greek/attachments/20011204/c33aa272/attachment.html 


More information about the B-Greek mailing list