- Discovered:
- April 11, 2001
- Updated:
- February 13, 2007 11:36:15 AM
- Also Known As:
- W32/Badtrans-A [Sophos], W32/Badtrans@MM [McAfee], BadTrans, I-Worm.Badtrans [KAV], WORM_BADTRANS.A [Trend], TROJ_BADTRANS.A [Trend], Win32.Badtrans.13312 [CA], Pws-AV Trojan, W32.Badtrans.13312@mm, Trojan.Psw.Hooker
- Type:
- Worm
- Systems Affected:
- Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
- CVE References:
- CVE-2001-0154
Due to a decreased rate of submissions, Symantec Security Response has downgraded the threat level of this worm from Category 3 to Category 2 as of May 5, 2003.
This is a MAPI worm that replies to all unread messages in your email message folders and drops a backdoor Trojan.
NOTE: Virus definitions dated prior to October 22, 2001 detected this as W32.Badtrans.13312@mm.
Antivirus Protection Dates
- Initial Rapid Release version April 11, 2001
- Latest Rapid Release version January 25, 2011 revision 025
- Initial Daily Certified version April 11, 2001
- Latest Daily Certified version January 25, 2011 revision 036
- Initial Weekly Certified release date April 11, 2001
Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.
Threat Assessment
Wild
- Wild Level: Low
- Number of Infections: 50 - 999
- Number of Sites: More than 10
- Geographical Distribution: High
- Threat Containment: Easy
- Removal: Easy
Damage
- Damage Level: Medium
Distribution
- Distribution Level: High
Writeup By: Peter Ferrie



