Subject: WARNING - VIRUS ALERT No.40
Date: Thursday, 27 January 2000 17:39:28 GMT
VIRUS ALERT - APStrojan.qa And BackDoor-G2
THIS ADVISE CONTAINS TWO ALERTS:
APStrojan.qa and BackDoor-G2.
APStrojan.qa
APStrojan.qa is a trojan and AVERT raised its risk assessment from Low to Medium--On Watch. It primarily infects Windows 98 systems, though it may also infect Windows 95 if the file MSVBVM50.DLL is present.
Please Note: This trojan has been reported by several users of the America Online Internet service. For this reason, AVERT researchers suspect it has been distributed by spam email sent to AOL users.
APStrojan.qa is a password stealer designed to attack America Online client software to determine user account passwords. It will then attempt to send the stolen information to the author of the trojan.
APStrojan.qa has been distributed as an attachment to an email with the subject line "hey you." The attachment has been widely reported with the name "MINE.EXE."
Important: If your system has been infected
with APStrojan.qa, AFTER removing the trojan,
be sure to choose a new password for your AOL account!
BackDoor-G2
BackDoor-G2 is an Internet Backdoor trojan that infects Windows 9x systems. It is a new variant of the original BackDoor-G, which was first discovered 4/15/99. AVERT has changed its risk assessment from Low to Medium--On Watch for individual home users (there have as yet been no reports of infection from corporate clients).
Once it infects your PC, BackDoor-G2 allows anyone running the appropriate
client software to have virtually unlimited access to your system over
the Internet.
Your vital, private files may be read, altered, or destroyed.
Note: If you are using McAfee Clinic you should get the available
update.
**************************************************************************
We thank you ALL for your kind votes which made this site FIRST in two categories.
A 10 vote = Very Good
A 1 vote = Waste of cyber Space !
ALL those sending emails of thanks are kindly requested to indicate whether these are for publication.
IMPORTANT NOTICE:
ALL those who are receiving this advise
and in the "name" field they find 'FAILED' and a 6 or 8 digit figure
after it, should be advised that at least once, emails to that address
have been received back by us. As the list of subscribers now exceeds 100,000, and since this
is a free service, we kindly urge you to become a registered
subscriber to this service and ensure delivery by subscribing under
a reliable email address. WE REGRET THAT AS AFTER THIS ISSUE,
ALL ADDRESSES THAT ARE NOT DELIVERABLE WILL BE REMOVED FROM THE LIST.
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty
of any kind. In no event shall we be liable for any damages whatsoever
including direct, indirect, incidental, consequential, loss of business profits
or special damages.
PLEASE ADVISE ALL YOUR FRIENDS ON YOUR LIST
PLEASE ALSO NOTE THE FOLLOWING:
1) You are currently SUBSCRIBED to our mailing list
2) If you are receiving more than one copy of this warning please click here
3) If you DO NOT wish to receive anymore of these alerts, please click here
4) YOUR friends are also welcome to be on the VIRUS ALERT but an email has to be
sent to the Webmaster by themselves so that a record of all requests can be kept in case
somebody cries "SPAM" ! Simply click here
and send the email as it appears.
5)THIS IS A FREE SERVICE RUN IN THE PUBLIC INTEREST BY
6) ALSO PLEASE BE ADVISED THAT YOUR EMAIL WILL
NEVER BE SOLD, EXCHANGED OR IN ANYWAY WHATSOEVER DISCLOSED TO ANYBODY ELSE.
******
Fabian Brincat
Webmaster
Fabian Enterprises Ltd.
SEE PREVIOUS
VIRUS ALERT
RETURN TO VIRUS ALERT
MAIN INDEX
©ALL MATERIAL IS PROTECTED BY COPYRIGHT LAWS AND MAY NOT BE REPRODUCED IN ANY FORM WHATSOEVER WITHOUT THE PRIOR WRITTEN CONSENT OF THE WEBMASTER.
