Still under virus attack, Stressline back online 12/1/01 We were able to identify and quarantine the virus which shut down Stressline's computer today. It was the W32Badtrans.B@mm virus which, according to the Norton web site, is "a MAPI worm that emails itself out as one of several different file names. This worm also drops a backdoor trojan that logs keystrokes." They issued a security alert for this virus. This virus was discovered on March 11, 2001. Stressline is still receiving email with attachments that are apparently infected with this virus. Continued from front page...... According to the description of this virus on McAffee web site: "Once running, the trojan attempts to mail the victim's IP Address to the author. Once this information is obtained, the author can connect to the infected system via the Internet and steal personal information such as usernames, and passwords. In addition, the trojan also contains a keylogger program which is capable of capturing other vital information such as credit card and bank account numbers and passwords." The email message subject is usually left blank. This is another reason to to be very wary of email that has nothing in the subject section, and to include a subject in all emails that you send. The message attachments will have one of the following names: Card.DOC.pif; docs.DOC.pif; fun.MP3.pif; HAMSTER.DOC.pif; Humor.MP3.scr; images.DOC.pif; info.DOC.scr; Me_nude.MP3.scr; New_Napster_Site.MP3.pif; news_doc.DOC.scr; Pics.DOC.scr; README.MP3.scr; S3MSONG.DOC.scr; SEARCHURL.MP3.pif; SETUP.DOC.scr; Sorry_about_yesterday.MP3.pif; stuff.MP3.pif; or YOU_are_FAT!.MP3.scr. We repaired our computer by logging on in safe mode. This is done by repeatedly clicking the F8 key during start-up. Then we ran a virus scan and repair. We also downloaded an updated critical update patch for Internet Explorer from Microsoft, which hopefully will protect our email from this virus. We strongly recommend all readers using Explorer download this patch.
|