W32.Badtrans.B@mm

Due to a decreased rate of submissions, Symantec Security Response has downgraded the threat level of this worm from Category 3 to Category 2 as of May 5, 2003.

W32.Badtrans.B@mm is a MAPI worm that emails itself out using different file names. It also creates the file \Windows\System\Kdll.dll. It uses functions from this file to log keystrokes.

Antivirus Protection Dates

• Initial Rapid Release version November 24, 2001
• Latest Rapid Release version March 31, 2009 revision 036
• Initial Daily Certified version November 24, 2001
• Latest Daily Certified version April 15, 2009 revision 048
• Initial Weekly Certified release date November 24, 2001

Click here for a more detailed description of Rapid Release and Daily Certified virus definitions.

Threat Assessment

Wild

• Wild Level: Medium
• Number of Infections: More than 1000
• Number of Sites: More than 10
• Geographical Distribution: High
• Threat Containment: Moderate
• Removal: Moderate

Damage

• Damage Level: Low

Distribution

• Distribution Level: High