Re: Virus W32.Badtrans

Segnalo che il virus in questione ha concesso sulla mia macchina, NT 3 i
permessi di admin a tutti gli user registrati, incrementando inoltre il
traffico di circa il 45% verso i piu' disparati host (porta 80)..

Alex

----- Original Message -----
From: "Amodiovalerio Verde" <amover@wipsrl.it>
To: <ml@sikurezza.org>
Sent: Wednesday, November 28, 2001 6:08 PM
Subject: Virus W32.Badtrans


> Riporto :
>
> Due to the increased rate of submissions, Symantec Security Response has
> upgraded the threat level of this worm from level 3 to level 4 as of
> November 26, 2001.
>
> W32.Badtrans.B@mm is a MAPI worm that emails itself out using different
file
> names. It also creates the file \Windows\System\Kdll.dll. It uses
functions
> from this file to log keystrokes.
>
>
>
> La cosa pericolosa è che se il messaggio viene letto da outlook, la
> "infezione" avviene senza nemmeno aprire l'allegato...
>
> Maggiori info su :
>
>
http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.ht
> ml
>
> e
>
> http://www.mcafee.com/anti-virus/viruses/badtrans/default.asp?cid=2607
>
> Ciauz
>
> Valerio [Hypo] Verde
>
>
> ________________________________________________________
> http://www.sikurezza.org - Italian Security Mailing List
>
>


________________________________________________________
http://www.sikurezza.org - Italian Security Mailing List