May 29, 2001

The W32.Badtrans.13312@mm virus is a MAPI worm that replies to all unread mails in your e-mail message folders, and drops a backdoor Trojan. The virus spreads through a variety of e-mail attachment names. When the worm is executed, it drops the backdoor Trojan 'Hkk32.exe' in the '\Windows' folder, and then executes it. It then copies itself into the '\Windows' folder as 'inetd.exe', adds a 'run=' line to the 'win.ini' file, and displays the following message: 'File data corrupt: probably due to bad data transmission or bad disk access.' Norton AntiVirus users should run LiveUpdate to make sure they are up to date. Updated Norton virus definitions will prevent infection. More information and removal instructions are available at:

http://www.symantec.com/avcenter/venc/data/w32.badtrans.13312@mm.html External Link