W32/Badtrans-B is an email-aware worm which uses MAPI to spread. The worm forwards itself to addresses found on the infected computer as an email message with no message text. The worm finds addresses to send itself to by searching the address book. Additionally it searches the internet cache and "My Documents" folders for webpages, looking for further email addresses to which to send itself. If the worm is replying to mail found on the infected machine, it will use the infected user's address in the From: field of the email, otherwise it will use one of the following addresses in the From: field: " Anna" < /> "JUDY" < /> "Rita Tulliani" < /> "Tina" < /> "Kelly Andersen" < /> " Andy" < /> "Linda" < /> "Mon S" < /> "Joanna" < /> "JESSICA BENAVIDES" < /> " Administrator" < /> " Admin" < /> "Support" < /> "Monika Prado" < /> "Mary L. Adams" < />
PC DoorGuard detects and cures "BadTransII" and its clones. The usage is pretty strait- run it and delete any found infected files.
