| Name: | Badtrans |
| Aliases: | TROJ_BADTRANS.A, W32.Badtrans.13312@mm, I-WORM.BADTRANS, DUNpws.av, |
| Ports: | |
| Files: | INETD.EXE - Kern32.exe - Hkk32.exe - Hksdll.dll - Cp_23421.nls - fun.pif - Humor.TXT.pif - docs.scr - s3msong.MP3.pif - Sorry_about_yesterday.DOC.pif - Me_nude.AVI.pif - Card.pif - SETUP.pif - searchURL.scr - YOU_are_FAT!.TXT.pif - hamster.ZIP.scr - news_doc.scr - New_Napster_Site.DOC.SCR - README.TXT.pif - images.pif - Pics.ZIP.scr - - 13,312 bytes |
| Created: | 2001 |
| Requires: | |
| Actions: | Worm / Steals passwords / Mail trojan / Trojan dropper |
| Alters Win.ini. When the attachement is run, it shows the message | |
| Versions: | |
| Registers: | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\ |
| Notes: | Works on Windows 95, 98, NT and 2000, together with MS Outlook andMS Outlook Express. Also works with other MAPI enabled software. |
| Country: | written in Great Britain |
| Program: |