Technology Services Center (TSC)
|
|
TSC Tech Alerts |
Reports are being received about the spread of a new Internet Worm called W32/Badrrans@MM. Please note that VirusScan and other McAfee products with DAT files 4167 are protected from this virus and the .b variant without any updating from that DAT.
BadTrans is a worm spreading with e-mail messages from Win32 systems. The worm sends email messages with infected attached files, as well as installs a spying trojan component to steal information from infected systems.
The attachment is an Internet worm compiled as an executable.
Please note that this file may have many different names, including the
folllowing:
| Card.pif | images.pifPics.ZIP.scr | s3msong.MP3.pif |
| docs.scr | New_Napster_Site.DOC.scr | searchURL.scr |
| fun.pif | news_doc.scr | SETUP.pif |
| hamster.ZIP.scr | Me_nude.AVI.pif | Sorry_about_yesterday.DOC.pif |
| Humor.TXT.pif | README.TXT.pif | YOU_are_FAT!.TXT.pif |
This mass mailing worm attempts to send itself using the email client by replying to unread email messages. When run, the worm displays a message box entitled, "Install error" which reads:
File data corrupt: probably due to a bad data transmission or bad disk access.
The message body may contain the text:
Take a look to the attachment.
This virus will overwrite certain files on your system then send out a copy of itself via e-mail. Once infected, these copies of the W32/BadTrans@MM virus e-mail are sent unknowingly by the infected user.
If you receive such a message, delete it immediately.
If you are concerned that you may have this virus on your PC, please contact the person or group responsible for your computing support.
Note:As we have noted in previous virus alerts, please use extreme caution with attachments in e-mail. Do not open attachments from an untrusted origin and never open attachments that appear suspicious in any way. If you do not recognize the attachment type, do not open it. You should particularly beware of attachments with a file type of .exe, .bat. .com. .scr, or .vbs. If in doubt, do not open the attachment! Contact the your tech support group or delete the message.
See also the IUP McAfee Download Page
More information on the this virus may be found online at
Technology Services Center Home (TSC) |
TSC Services
Read this
disclaimer.
Maintained by
Bill Balint
<wsbalint@iup.edu>