This is what I got from useing quick heal
NAME: W32.Badtrans.B
W32.Badtrans.B has suddenly struck in the wild.
The worm arrives in a email. The sender name
and the attachment file name both are variable.
The attached filename is also selcted from one
of the following names:
"PICS", "IMAGES","README","New_Napster_Site","NEWS_DOC ",
"HAMSTER", "YOU_are_FAT!" or "YOU_ARE_FAT!","stuff",
"SETUP","Card" or "CARD","Me_nude" or "ME_NUDE",
"Sorry_about_yesterday","info", "docs" or "DOCS",
"Humor" or "HUMOR","fun" or "FUN","SEARCHURL"
"S3MSONG"
The attachment file has a double extention.
All users are requested if they receive such mail
with any such attachment
PLEASE DO NOT EXECUTE SUCH ATTACHMENT
delete this file/Email.
A Special update has been provided on 26st November 2001
having solution for this virus.
PLEASE UPDATE YOUR COPY USING THE SPECIAL UPDATE
PROVIDED ON 26th NOVEMBER.
If you have any queries please write to
[email protected]
Thanking you,
Quick Heal Team