Newsgroup: it.economia.borsa
Titolo: OT virus

Oggi  ho trovato il virus WORM BADTRANS  B  e non sono riusito a  pulirlo
tramite internet mi sapete dire qualcosa  al riguardo? quanto mi devo
preoccupare?


Se può esserti utile, cerca questo antivirus: queste son
le loro spiegazioni. 
Ciao.
CENTRALCOMMAND.COM
 Newsletter
Without us, there's no defense.
Virus Warning: I-Worm.Badtrans.B
Central Command is warning its customers of a new Internet worm 
spreading
throughout the world. At this time Central Command is 
issuing a "Medium"
risk to this new worm.
Details:
Name: I-Worm.Badtrans.B
Aliases:
Win32.Badtrans-B@mm, W32/Badtrans@mm
ITW: Yes
Risk: Medium
Description:
I-Worm.Badtrans.B is a new variation of the Internet worm,
I-
Worm.Badtrans.A, a virus that spread via e-mail (a copy of the worm
was sent as a reply message to all unread emails in the users Inbox
folder). 
The worm arrives in the following e-mail format:
Attachment
line: A randomly selected messaged built from the 
following list and
combinations: 
docs, info, Me_nude,
Card, Humor, Sorry_about_yesterday
YOU_are_FAT!, stuff, news_doc
README, images, HAMSTER
The first
extension selected will be either: *.doc or *.zip or 
*.MP3 
Second
extension selected will be either: *.scr or *.pif 
These are a couple
examples of possible choosen subject lines:
Me_nude.zip.scr
README.MP3.pif
stuff.zip.pif
Body: (Blank)
If executed, the worm
copies itself in the \windows\%system% 
directory under the filename
"kernel32.exe". So that it gets run 
each time a user restart their
computer the following registry key 
gets added:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnc
e\Kernel32 ="kernel32.exe" 
Removal:
Step 1.) Run a deep scan of your
PC and delete any files identified 
as being infected with I-
Worm.Badtrans.B 
Step 2.) Delete the created registry key listed above
Central Command, Inc. respects your online privacy. You at anytime
can
easily remove your e-mail address from the Central Command mailing
list by
entering in your e-mail address at the following web page:
http://www.centralcommand.com/unsubscribe.html
You will receive a
confirmation message about your successful
removal from News.
THIS
DOCUMENT IS PROVIDED FOR INFORMATIONAL PURPOSES ONLY.
Disclaimer of
warranties and limitation of liability
This information is provided by
Central Command, Inc. on an "AS IS"
and "AS AVAILABLE" basis. Central
Command, Inc. makes no
representations or warranties of any kind, express
or implied, as to
the information, content, materials, or products
included, or
mentioned within this information bulletin. You expressly
agree that
your use of this information is at your sole risk. The user
assumes
the entire risk as to the accuracy and the use of this document.
To the full extent permissible by applicable law, Central Command,
Inc.
disclaims all warranties, express or implied, including, but
not limited
to, implied warranties of merchantability and fitness
for a particular
purpose and freedom from infringement. Central
Command, Inc. does not
warrant that this information is accurate.
Central Command, Inc. will not
be liable for any damages of any kind
arising from the use of this
information, including, but not limited
to direct, indirect, incidental,
punitive, and consequential
damages.
Certain state laws do not allow
limitations on implied warranties or
the exclusion or limitation of
certain damages. if these laws apply
to you, some or all of the above
disclaimers, exclusions, or
limitations may not apply to you, and you
might have additional
rights.
Central Command, PerfectSupport, EVRT,
Emergency Virus Response
Team, Virus Protection for the Real World,
Without us, there's no
defense. are trademarks of Central Command Inc. All
other
trademarks, trade name and product names are property of their
respective owners. Copyright (C) 2000, 2001 Central Command Inc. All
rights reserved.
--------------------------------
Inviato via 
http://usenet.iol.it