ITrain Homepage

Site Directory
Membership
Train-the-Trainer
Trainer Certification
Certified Training Materials
ITinfo E-zine
Responsible Training
White Papers
Trainer Resources
What's New
Speaking Engagements
Onsite Training
ITrain Gear



Popular Links
Speaking Engagements
Training Manuals
Certification
Train the Trainer
The Training Book
Technical Writing
Privacy Policy

Print this document

Google
Web ITrain.org

New Worm To Worry About

Keylogger program captures passwords & other sensitive data

ITinfo Sponsor

ERROR: Random File Unopenable

ERROR: Random File Unopenable

The random file, as specified in the $random_file perl variable was unopenable.

The file was not found on your file system. This means that it has either not been created or the path you have specified in $trrandom_file is incorrect.

Badtrans Worm Hunts Down Microsoft Outlook Users

by Dave Murphy
ISSN 1535-3613

Dave Murphy, ITrain founder Microsoft Outlook users have another Internet worm to worry about: Badtrans. Antivirus experts at McAfee are receiving widespread reports of the worm from home and business computer users.

The worm is receiving a boost by home users who are sending holiday e-mail to family and friends. Recipients who are excited to receive the holiday mail are forgetting to scan the email attachments and to practice other computer security procedures.

The worm's message body may contain the text: "Take a look to the attachment." The worm's payload is a keylogger program that captures and stores credit card numbers, passwords, and other personal data. The worm's author then receives an email identifying the infected systems.

Badtrans then transmits itself to addresses in the Microsoft Outlook address book.

The worm will arrives in an attachment that may be named:

  • Card.pif
  • docs.scr
  • fun.pif
  • hamster.ZIP.scr
  • Humor.TXT.pif
  • images.pif
  • New_Napster_Site.DOC.scr
  • news_doc.scr
  • Me_nude.AVI.pif
  • Pics.ZIP.scr
  • README.TXT.pif
  • s3msong.MP3.pif
  • searchURL.scr
  • SETUP.pif
  • Sorry_about_yesterday.DOC.pif
  • YOU_are_FAT!.TXT.pif

Dave's Opinion

McAfee VirusScan's update 4168 will detect and can clean the Badtrans worm; however, many users don't subscribe to McAfee's ActiveShield program or download the SuperDAT (antivirus database) weekly updates. If you haven't updated your antivirus software in the last week or so, check your software vendor's website for the most recent virus database download.

I suggest update your antivirus software every week.

Call for Comments

What do you think? Leave your comments on the message center.

References

McAfee
Message Center

Subscribe to ITinfo.
Receive computing and Internet news & tips
by subscribing to the ITinfo information service.
Type your Internet email address in the form, and click "Subscribe."
Email Address:

Previous issues are on our website at http://itrain.org/itinfo/.

International Association of Information Technology Trainers
PMB 616
6030-M Marshalee Dr
Elkridge, MD 21075-5987

410.567.5366
1.888.290.6200
fax: 801.650.0423
Membership Director: member@itrain.org

Return to ITrain Homepage

Copyright © 2001 International Association of Information Technology Trainers, Ltd., All Rights Reserved

http://itrain.org/itinfo/2001/it011126a.html
updated November 26, 2001