Print

Print


For information

Received the alert below from our IT Helpdesk today; passing it on in case
any else wasnt aware of it.

I've already had a couple of affected messages (which wont infect our system
as our virus checker 'kills' the virus, but still passes on the message).

'There has recently been a virus outbreak by the W32.Badtrans.B@mm virus.

The BL email system is currently protected from this virus, however staff
should read the details below as you may receive strange blank emails from
external contents containing little more than a file attachment.

When run, this mass mailing worm attempts to send itself using Microsoft
Outlook by replying to unread email messages, thus to a recipient it will
look like someone has responded to a message you have sent to them.
The worm also drops a remote access trojan, which once running, will attempt
to mail the victim's IP Address to the author. Once this information is
obtained, the author can connect to the infected system via the Internet and
steal personal information such as usernames, and passwords. In addition,
the trojan also contains a keylogger program which is capable of capturing
other vital information such as credit card and bank account numbers and
passwords.
The next time Windows is loaded, the worm attempts to email itself by
replying to unread messages in Microsoft Outlook folders. The worm will be
attached to these messages using one of the following filenames (note that
some of these filenames are also associated with other virus threats):

Card.pif
docs.scr
fun.pif
hamster.ZIP.scr
Humor.TXT.pif
images.pif
New_Napster_Site.DOC.scr
news_doc.scr
Me_nude.AVI.pif
Pics.ZIP.scr
README.TXT.pif
s3msong.MP3.pif
searchURL.scr
SETUP.pif
Sorry_about_yesterday.DOC.pif
YOU_are_FAT!.TXT.pif

The message body may contain the text:

"Take a look to the attachment".

Please note: Although the Outlook / MS Exchange System at the British
Library is protected from this virus, you may receive messages from external
contacts containing little more than a text attachment titled 'alert1.txt' .
Staff should avoid opening this message and simply delete it.'

Fiona
BL




*********************************************************************
The information contained in this e-mail is confidential and may be
legally privileged. It is intended for the addressee(s) only. If you
are not the intended recipient, please delete this e-mail and notify
the [log in to unmask] : The contents of this e-mail must not be
disclosed or copied without the sender's consent.

The statements and opinions expressed in this message are those of
the author and do not necessarily reflect those of the British
Library. The British Library does not take any responsibility for
the views of the author.
*********************************************************************