InterScan NT Alert

Lee Roberts n0sq@actcom.net
Tue Nov 27 05:29:01 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 06:17 PM 11/26/2001 -0500, Tom McCune wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>                     W32.Badtrans.B@mm is a MAPI worm that emails itself
>out as one of several different file names. This worm also
>                     creates a DLL in \Windows\System directory as
>Kdll.dll. It uses functions from this DLL to log keystrokes."
>

I have an skdll.dll on my PC. Is this a variation?

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>

iQA/AwUBPAMVMowoPKBUx8xQEQK0FwCg4vcG0XBimdWRWWMCoEiCOjbI7ycAoPUk
Kp1s/iacWixcG2vIqwamYnHw
=nknC
-----END PGP SIGNATURE-----