From: "Henry M Whitney" <>
Subject: [WHITNEY-L] Fw: [MIX-L] FWD: [MDK-12] Worm Alert: BadTrans.B
Date: Mon, 26 Nov 2001 22:06:12 -0500
This ties in with other messages posted today regarding viruses sent as
attachments.
Henry M. Whitney ()
----- Original Message -----
From: "David Chessler" <>
To: <>
Sent: Monday, November 26, 2001 9:32 PM
Subject: [MIX-L] FWD: [MDK-12] Worm Alert: BadTrans.B
> Users on two other lists claim that the message contains code to trick
your
> computer into opening it. (But see below; this may be when Outlook
> "previews" the message.) Moreover, if your virus update is 11/23 or
> earlier, it may not protect against this one. On the other hand, Symantec
> has had it in its virus definitions since April.
>
> http://www.symantec.com/avcenter/venc/data/ type="text/javascript">DisplayMail('mm.html','w32.badtrans.13312');
>
>
> * Original: FROM..... Brian Swartzfager
>
> This worm that affects Windows machines is reportedly spreading across
> the Internet. It arrives in an email message with a subject line that
> usually starts with "Re:" and ends with the name of an attached file.
> The message body is either blank or contains the text "Take a look to
> the attachment". Users of Outlook Express 5 or 5.5 who have not
> installed the proper security patch can have their machines infected
> simply by previewing or reading the message. Once the attachment is
> opened, a trojan horse program is installed on the machine so that the
> virus creator can monitor the infected machine. The worm then sends
> out copies of itself via email by replying to unread messages in
> Microsoft Outlook. The best way to avoid being infected by this worm
> is to not open any strange email attachments. For more information,
> visit our website at:
> http://www.helpdesk.umd.edu/alerts/virus/badtransb.shtml
>
> This message was sponsored by the Office of Information Technology.
> For further information, visit our website at:
http://www.helpdesk.umd.edu
>