TNHARDIN-L Archives

From: "Jerry W. Murphy" <>
Subject: [TNHARDIN] Fw: {not a subscriber} Trojan Horse Virus
Date: Sun, 29 Apr 2001 19:39:20 -0500

Reply to "Sylvia Gant" <>



----- Original Message -----
From: "Sylvia Gant" <>
To: <>
Sent: Sunday, April 29, 2001 4:08 PM
Subject: {not a subscriber} Trojan Horse Virus


> David,
>
> Jerry was right about the virus. I checked in the McAfee Dispatch
Archives earlier today and it is exactly as I discribed. It is called a
medium-risk virus (W32/Badtrans@MM)--a mass-mailing worm that spreads via
MS Outlook. It creates an Outlook object that sends an infected document as
a reply to all unread e-mails. When I thought it wasn't opening--it was.
The worm displays a message box with the title Install Error with the
message "File data corrupt: probably due to a bad data transmission."
> Once running, the Trojan attempts to mail the victim's IP address to the
author. With it, he can connect to the infected system through the
Internet and steal personal information such as usernames, passwords, credit
card numbers, and bank account numbers. This explanation is followed by
"click here" for detection and removal instructions. I went through the
process three times to make sure I got rid of the virus. The instructions
were easy to follow, but one has to have a McAfee subscription to access
them.
>
> Sylvia Gant
>
> Sylvia Gant
>
>

This thread:

• [TNHARDIN] Fw: {not a subscriber} Trojan Horse Virus by "Jerry W. Murphy" <>