I recently have been hit several times with email infected with the worm w32.badtrans.b@mm". Fortunately, my virus program stopped it each time. But, I followed Ken's link to Microsoft's fix for this problem, and found that they say that you shouldn't have this problem if you are running IE 6, which I am. There is no download for IE6 that I could find. Do you have any other ideas on how to stop this worm from hitting my system? And, if I download a fix for the worm, will that stop the system from "trying" to open the file so that the virus program has to delete it? Thank you.
Cassandra
This question was answered on December 5, 2001. Much of the information contained herein may have changed since posting.
Hello,
This memory-resident Internet worm is a variant of WORM_BADTRANS.A It propagates via MAPI32, has a Key Logger component, and arrives with randomly selected double-extension filenames
It does not require the email receiver to open the attachment for it to execute It uses a known vulnerability in Internet Explorer-based email clients (Microsoft Outlook and Microsoft Outlook Express) to automatically execute the file attachment This is also known as Automatic Execution of Embedded MIME (Multipurpose Internet Mail Extentions) type
When you upgraded to IE 6, did you select the Full Install?
According to Microsoft Security Bulletin (MS01-020), this vulnerability to the worm can be eliminated either by installing the patch or upgrading to an unaffected version However, customers who upgrade to IE 6 on Windows 95, 98, 98SE or ME must select either Typical Install (this is the default) or Full Install in order to eliminate the vulnerability
By this, its likely you have not downloaded the Full Version.
As to your second question, with IE 6, you don't need a fix and with the new version it shouldn't launch the attachment automatically when it rendered the e-mail
Thank you for writing and hope this has been helpful!
About the author
Posted by Phoenixaz of Chandler-Gilbert Community College on December 5, 2001
Need Help with this Issue?
We help people with technology! It's what we do.
Contact or Schedule an Appointment with a location for help!