Trend Micro Medium Risk Virus Alert - TROJ_VOTE.A Dear Trend Micro Customer: TROJ_VOTE.A is currently spreading in-the-wild. This destructive, mass-mailing Trojan was created using Visual Basic 5. It propagates via Microsoft Outlook by sending emails to all addresses listed in an infected user's address book. It arrives in an email with the following: Subject: Fwd: Peace BeTween AmeriCa And IsLam ! Message Body: Hi! iS iT A waR Against AmeriCa Or IsLam! Let's Vote To Live in Peace! Attachment: WTC.EXE TROJ_VOTE.A deletes certain antivirus products installed in a system, drops the files WTC.exe MixDaLaL.vbs, and Zacker.vbs. It also modifies the infected user's Internet Explorer startup page, and formats the infected user's drive c:\. It parses drives and directories in search of HTM and HTML files and overwrites them with the following string: AmeRiCa ...Few Days WiLL Show You What We Can Do !!! It's Our Turn >>> ZaCkEr is So Sorry For You. TROJ_VOTE.A is detected by pattern file #945. For more information on TROJ_VOTE.A please visit our Web site at: http://www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_VOTE.A **************************************************************************** ************** You are receiving this email from Trend Micro, because you have either downloaded a Trend Micro product or have signed up for our "Virus Alerts." If you would like to change the way you receive email from Trend Micro please make changes in your account page at http://www.antivirus.com/subscriptions/default.asp?email=RTENER@MIDSHIPCOM To UNSUBSCRIBE go to: http://www.antivirus.com/subscriptions/default.asp?format=unsubscribe For questions regarding viruses, please contact the Virus Doctor at [EMAIL PROTECTED] For questions regarding products, please contact Tech Support at [EMAIL PROTECTED] **************************************************************************** *************** _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
