W32.Badtrans.gen@mm

Risk Level 2: Low

Printer Friendly Page

Discovered: April 11, 2001
Updated: February 13, 2007 11:36:15 AM
Also Known As: W32/Badtrans-A [Sophos], W32/Badtrans@MM [McAfee], BadTrans, I-Worm.Badtrans [KAV], WORM_BADTRANS.A [Trend], TROJ_BADTRANS.A [Trend], Win32.Badtrans.13312 [CA], Pws-AV Trojan, W32.Badtrans.13312@mm, Trojan.Psw.Hooker
Type: Worm
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows XP
CVE References: CVE-2001-0154


Due to a decreased rate of submissions, Symantec Security Response has downgraded the threat level of this worm from Category 3 to Category 2 as of May 5, 2003.

This is a MAPI worm that replies to all unread messages in your email message folders and drops a backdoor Trojan.

NOTE: Virus definitions dated prior to October 22, 2001 detected this as W32.Badtrans.13312@mm.

Protection

  • Initial Rapid Release version April 11, 2001
  • Latest Rapid Release version June 22, 2009 revision 066
  • Initial Daily Certified version April 11, 2001
  • Latest Daily Certified version June 22, 2009 revision 049
  • Initial Weekly Certified release date April 11, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

  • Wild Level: Low
  • Number of Infections: 50 - 999
  • Number of Sites: More than 10
  • Geographical Distribution: High
  • Threat Containment: Easy
  • Removal: Easy

Damage

  • Damage Level: Medium

Distribution

  • Distribution Level: High

Writeup By: Peter Ferrie
Search by name
Example: W32.Beagle.AG@mm
ThreatCon Widget