Trend Micro Medium Risk Virus Alert

Trend Micro Medium Risk Virus Alert - TROJ_VOTE.A

[ Follow Ups ] [ Post Followup ] [ Forum ]

Posted by baby2uhoney (Platinum) (Ranked 10 on Hardwood Hearts Ladder) on September 25, 2001 at 09:18:30:

Trend Micro Medium Risk Virus Alert - TROJ_VOTE.A

Dear Trend Micro Customer:

TROJ_VOTE.A is currently spreading in-the-wild. This destructive, mass-mailing Trojan was created using Visual Basic 5. It propagates via Microsoft Outlook by sending emails to all addresses listed in an infected user’s address book. It arrives in an email with the following:

Subject: Fwd: Peace BeTween AmeriCa And IsLam !

Message Body: Hi! iS iT A waR Against AmeriCa Or IsLam! Let’s Vote To Live in Peace!

Attachment: WTC.EXE

TROJ_VOTE.A deletes certain antivirus products installed in a , drops the files WTC.exe MixDaLaL.vbs, and Zacker.vbs. It also modifies the infected user’s Internet Explorer startup page, and formats the infected user’s drive c:\.

It parses drives and directories in search of HTM and HTML files and overwrites them with the following string: AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >>> ZaCkEr is So Sorry For You.

TROJ_VOTE.A is detected by pattern file #945.

For more information on TROJ_VOTE.A please visit our Web site at:
http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_VOTE.A

Follow Ups:

Post a Followup

Ladder:
Ladder Name:
Password:
Password saved if checked

Subject:

Comments:
: Trend Micro Medium Risk Virus Alert - TROJ_VOTE.A : Dear Trend Micro Customer: : TROJ_VOTE.A is currently spreading in-the-wild. This destructive, mass-mailing Trojan was created using Visual Basic 5. It propagates via Microsoft Outlook by sending emails to all addresses listed in an infected user’s address book. It arrives in an email with the following: : Subject: Fwd: Peace BeTween AmeriCa And IsLam ! : Message Body: Hi! iS iT A waR Against AmeriCa Or IsLam! Let’s Vote To Live in Peace! : Attachment: WTC.EXE : TROJ_VOTE.A deletes certain antivirus products installed in a , drops the files WTC.exe MixDaLaL.vbs, and Zacker.vbs. It also modifies the infected user’s Internet Explorer startup page, and formats the infected user’s drive c:\. : It parses drives and directories in search of HTM and HTML files and overwrites them with the following string: AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >>> ZaCkEr is So Sorry For You. : TROJ_VOTE.A is detected by pattern file #945. : For more information on TROJ_VOTE.A please visit our Web site at: : http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_VOTE.A

Optional Link URL:

Link Title:

Optional Image URL:

[ Follow Ups ] [ Post Followup ] [ Forum ]