Rec'd this from a virus alert list I belong to. 2. New Variant Infecting Thousands - WORM_BADTRANS.B (Medium Risk) ------------------------------------------------------------------------ This memory-resident Internet worm is a variant of WORM_BADTRANS.A. It propagates via MAPI32, has a Key Logger component, and arrives with randomly selected double-extension filenames. It does not require the email receiver to open the attachment for it to execute. It uses a known vulnerability in Internet Explorer-based email clients (Microsoft Outlook and Microsoft Outlook Express) to automatically execute the file attachment. This is also known as Automatic Execution of Embedded MIME type. This worm is currently spreading in-the-wild, and is classified as medium risk. As of November 30, there have been more than 20,000 infections of WORM_BADTRANS.B worldwide, according to Trend Micro's World Virus Tracking Center at: http://wtc.trendmicro.com/wtc/ WORM_BADTRANS.B is detected by Trend Micro pattern file #170 or #970. For additional information about WORM_BADTRANS.B, please visit Trend Micro at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BADTRANS .B.
I have received several of these 'non attachment' attacks. Carol S. ----- Original Message ----- From: "Victoria Hospodar Valentine" <vvalentine4@home.com> To: <PA-PITTSBURGH-L@rootsweb.com> Sent: Saturday, December 01, 2001 4:19 AM Subject: [PITTSBURGH] Info Re: worm_badtrans.b > Rec'd this from a virus alert list I belong to. > > 2. New Variant Infecting Thousands - WORM_BADTRANS.B (Medium Risk) > ------------------------------------------------------------------------ > This memory-resident Internet worm is a variant of WORM_BADTRANS.A. It > propagates via MAPI32, has a Key Logger component, and arrives with randomly > selected double-extension filenames. > > It does not require the email receiver to open the attachment for it to > execute. It uses a known vulnerability in Internet Explorer-based email > clients (Microsoft Outlook and Microsoft Outlook Express) to automatically > execute the file attachment. This is also known as Automatic Execution of > Embedded MIME type. > > This worm is currently spreading in-the-wild, and is classified as medium > risk. As of November 30, there have been more than 20,000 infections of > WORM_BADTRANS.B worldwide, according to Trend Micro's World Virus Tracking > Center at: http://wtc.trendmicro.com/wtc/ > > WORM_BADTRANS.B is detected by Trend Micro pattern file #170 or #970. > > For additional information about WORM_BADTRANS.B, please visit Trend Micro > at: > http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=WORM_BADTRANS > .B. > > > > ==== PA-PITTSBURGH Mailing List ==== > How to unsubscribe. Send a message to:PITTSBURGH-L-REQUEST@rootsweb.com that contains ONLY the word, 'unsubscribe' in the text area. > > ============================== > Visit Ancestry.com for a FREE 14-Day Trial and enjoy access to the #1 > Source for Family History Online. Go to: > http://www.ancestry.com/rd/redir.asp?targetid=702&sourceid=1237 >