|
|
|
VIRUS
ALERT---"Badtrans"
Worm---Info on detection, prevention, removal This variant of the Badtrans virus is spreading rapidly. It affects Windows users, infecting computers when the user merely reads either the message or a preview of the message; opening its attachment is not necessary for infection to occur. Macs appear to be unaffected. Attachment names vary considerably, header info also varies. Most Subject: lines are either "Re:" or "Re: Re:"sometimes with nothing further there, other times with subject text; message body usually has no message, and sender's address ("From:") typically has an underscore ("_") prefixed to the username. In addition to using your email to spread itself, the worm installs a "Trojan Horse" which logs keystrokes. This info is then available to the worm's author(s), thus creating a significant threat to users' privacy and security, as passwords, credit card numbers and such may be compromised. We are filtering for this virus, but there is no guarantee we will catch everything. On the user-level, most email software has filtering capabilities that individuals can set to catch and remove suspicious messages. Customers should enable filtering features in their own software to catch anything that slips through our filters. Using the underscored From: address will probably work best ("_user@wherever.com"). Also, be sure you have updated anti-virus protection, and that any appropriate Microsoft Security Patches for your software versions have been applied. See below for links to the Symantec, McAffee, and Microsoft sites that can aid in the detection, prevention, and removal of this virus. McAffee:
Symantec:
Microsoft:
|
