Fwd: VIRUS Advisory - W32/Badtrans@MM and W32/Matcher@MM

---------------------- Forwarded by Vince J Kaminski/HOU/ECT on 04/23/2001
05:28 PM ---------------------------

jgshelp <jgshelp@rice.edu< (by way of Suzana Gamez-Vazquez <ramos on
04/23/2001 09:00:36 AM
To: (Recipient list suppressed)
cc:
Subject: Fwd: VIRUS Advisory - W32/Badtrans@MM and W32/Matcher@MM

MESSAGE FROM IT STAFF:

<(((((((((((((((((( McAfee.com Dispatch )))))))))))))))))))))
<
<_______________________VIRUS ALERT__________________________
<
<
<**VIRUS Advisory - W32/Badtrans@MM and W32/Matcher@MM**
<
<
<Dear McAfee.com Dispatch Subscriber:
<
<The incidence of the following 2 MEDIUM-RISK viruses has
<been rising over the last several days. McAfee.com recommends
<that you scan your system to check for infection.
<
<1. W32/Badtrans@MM is a mass-mailing worm that spreads via
<the email program MS Outlook. This worm creates an Outlook
<object that sends an infected document as a reply to all
<unread email messages. If the attachment is opened, the worm
<displays a message box:
<
<Title: Install error
<
<Message: File data corrupt: probably due to a bad data
<transmission or bad disk access.
<
<Once running, the Trojan attempts to mail the victim's IP
<Address to the author. When this information is obtained,
<the author can connect to the infected system via the Internet
<and steal personal information such as usernames, and passwords.
<In addition, the Trojan is capable of capturing other vital
<information such as credit card and bank account numbers.
<
<Click here for detection and removal instructions:
<-< http://www.mcafee.com/anti-virus/viruses/badtrans/
<
<2. W32/Matcher@MM is a mass-mailing worm that spreads via MS
<Outlook.
<
<Once running, the program attempts to email itself to everyone
<in the Outlook Address book repeatedly, until the worm is
<removed from the system. The email message appears as follows:
<
<Subject: Matcher
<
<Body: Want to find your love mates!!! Try this its cool...
<Looks and Attitude Maching to opposite sex.
<
<Attachment: Matcher.exe
<
<Click here for more information:
<-< http://vil.mcafee.com/dispVirus.asp?virus_k=99072&
<
<McAfee.com VirusScan Online and Clinic Subscribers: If you
<don't have ActiveShield installed and updated, you are not
<protected from these worms. Click here to download ActiveShield:
<-<
<http://clinic.mcafee.com/clinic/virusscan/activeshield/default.asp?area=activ
eshield
<
<New Users: Click here to scan your system for free:
<-< http://www.mcafee.com/myapps/vso/ov_scan.asp?
<
<
<
<--McAfee.com
<
<_______________________Virus Fixes__________________________
<
<
<Find out more about this virus. Click here to go to the
<W32/Badtrans@MMHelp Center:
<-< http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2208
<
<Purchase the latest copy of VirusScan, please click here:
<-<
<http://mcafeestore.beyond.com/AF77887-VS_700/Product/0,1057,3-18-SN101924,00.
html
<
<Purchase the VirusScan Maintenance Plan which entitles you
<to updates and an upgrade to the latest version of VirusScan,
<click here:
<-<
<http://mcafeestore.beyond.com/AF77887-SMP_400/Product/0,1057,3-18-SN102899,00
.html
<
<Download the latest DAT files, click here:
<-< http://download.mcafee.com/updates/updates.asp
<
<
<_____________________Anti-Virus Tips________________________
<
<
<Find out how to detect and prevent viruses with these handy
<tips. Click here:
<-< http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2212
<
<
<______________________Special Offer_________________________
<
<
<Complete Security.Get both anti-virus AND firewall protection
<at over 20% off. Buy Now:
<-< http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2209
<
<
<McAfee.com Personal Firewall. Now $10 OFF, on Sale (for a
<limited time) for only $19.95 (USD)! Click here:
<-< http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2210
<
< FreeMem Pro
<- Optimize your RAM and run Windows faster!
<- A McAfee.com Exclusive-Regularly $39 (USD), Now only $24 (USD)!
<
<Click Here:
<-< http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=2211
<
<
<~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
<
<
< This Virus Alert has been issued by the
< McAfee Anti-Virus Emergency Response Team (AVERT).
<
<[ You are currently subscribed as: jgshelp@rice.edu ]
<
<McAfee.com Support: To contact us about this dispatch, click here.
<-< http://www.mcafee.com/support/cust_serv/default.asp
<
<Subscribe: If you received this message from a friend and
<would like to subscribe to McAfee.com Dispatch, click here.
<-< http://dispatch.mcafee.com/sub.asp?s=22
<
<Unsubscribe: If you do not wish to receive email, click here.
<-< http://dispatch.mcafee.com/unsub.asp
<
<Note: Promotions are subject to change without notice.
<
<Click here to view our permission policy.
<-< http://dispatch.mcafee.com/permission_policy.asp
<
<Trademarks 2001 McAfee.com Corporation / All Rights Reserved.