Badtrans virus

From: thoms1991 (thoms1991@hotmail.com)
Date: Fri Nov 30 2001 - 14:39:53 EET


There is a new Windoze virus called "Badtrans."

When your system is infected, it will send replies to all unanswered =
email, and in each reply it will be sending out a copy of itself. What =
makes it more insidious is that it will also scan through the subject =
lines, and use those for email subject headings at random.

The only clue it will leave is that it will put an underscore in front =
of your sending email address, so someone receiving one of these =
malicious payloads will see:

_me@here.com

instead of...

me@here.com

What makes this virus particularly nasty is it will install a file in =
the Windows\system directory called "Kdll.dll." This file records your =
keystrokes with intent on reporting those keystrokes to a public area =
where the author can get at them. This means any credit card numbers, =
account numbers and passwords you use will be at his beck and call.

Make sure your virus programs have been updated.

For more information about the rp-ml, see http://rapid.lpt.fi/rp-ml/



This archive was generated by hypermail 2.1.2 : Fri Jan 04 2002 - 09:58:14 EET