Posted on 11/29/2001 11:40:41 AM PST by -No Way-
VIRUS ALERT! W32/Badtrans.B -----Original Message----- - The W32/Badtrans.B virus continues to spread - Oxygen3 24h-365d, by Panda Software (
Madrid, November 29 2001 -- The number of infections being caused by W32/Badtrans is reaching epidemic proportions in some countries. The areas hardest hit by the virus so far are the United States, France, Portugal, Germany, the United Kingdom, and Scandinavia.
Panda Software offers Gdogs the PQREMOVE(*) utility, free of charge. This tool automatically eliminates W32/Badtrans.B from infected systems. This application can be downloaded from: http://updates.pandasoftware.com/pqremove/pqremove.com To prevent infection from W32/Badtrans.B, Panda Software advises all Gdogs to update their antiviruses, immediately, from the Customer Area on the website at As Oxygen3 24h-365d recently reported, W32/Badtrans.B is a dangerous worm that spreads rapidly via e-mail. The file it is contained in has a variable name, which it makes up from three separate word lists. It also installs a Trojan designed to steal confidential data (passwords etc.) from the infected machine. Oxygen3 24h-365d reminds you that W32/Badtrans.b exploits a known vulnerability in versions 5.01 and 5.5 of Microsoft Internet Explorer. This vulnerability allows an attached file to be run through the message preview pane in Outlook e-mail clients. Gdogs with these versions are advised to download the corresponding patch from: http://www.microsoft.com/technet/security/bulletin/MS01-020.asp More information about W32/Badtrans.B is available in Panda Software's Virus Encyclopedia at: http://service.pandasoftware.es/library/virusCard.jsp?Virus=W32/Badtrans.B (*) If you are using Netscape Navigator, follow these steps to download the PQREMOVE utility: First, right-click the corresponding link, then select the 'Save Link as...' option. Finally, indicate the directory to which you want to save the file. NOTE: The addresses above may not show up on your screen as single lines. This would prevent you from using the links to access the web pages. If this happens, just use the 'cut' and 'paste' options to join the pieces of the URL.
Norton AV couldn't fix the files as of yesterday, and could only quarantine. I'll try the "panda" site to see if they can be fixed. If not, my computer guy says a re-format may be needed! Ugh!
Every one should be sure to change their passwords after getting rid of the nasty thing.
I will never understand the reasoning that some very smart people use, to develop these things.
BTW...I enjoy your stuff.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.