Antivirus: Virus Archives

Current client downloads:

	VScan Engine/Dat (SuperDat) -5.2.00/4.0.5378
	VirusScan Enterprise 8.5i (with Patch 6) - Windows NT/2000/XP/2003
	VirusScan Enterprise 7.1 - Windows NT/2000/XP/2003
	Virex (OS X) Engine/Def - 7.2(v1.1)/080903
	Virex (OS 9.x) Engine/Def - 6.2/071001
	Linux & Solaris Engine/Dat - 5.2.00/4.0.5196
	Symantec Antivirus - 10.1.7.7000
	Symantec Antivirus - 10.2
	Clean Boot 1.0
	Stinger v3.8.0 virus removal tool (Updated 09/10/07)

Current server downloads:

	VirusScan Enterprise 8.5
	VirusScan Enterprise 7.1
	NetShield NetWare - 4.6.2
	NetShield NetWare - 4.6.3
	NetShield NetWare Engine Update - 4.4.00
	ePO agent for NetWare
	ScanMail eManager - 3.0

	ePO 3.0/VirusScan 7.0 Presentation
	Virex 7.x Installation Instructions
	VirusScan FAQs
	VirusScan Instructions
	Additional Resources

List of Viruses

W32/Badtrans@mm variants 11/26/01 9:20am

Per NAI these worms attempt to send themselves using Microsoft Outlook by replying to unread email messages. They also drop a trojan file.

The worms are detected by the 4167 (or 2167) dats as Badtrans@MM. The trojan is detected as Backdoor-NK.svr with the 4134 dats.

The first variant has one of the following attachment names:

Card.pif
docs.scr
fun.pif
hamster.ZIP.scr
Humor.TXT.pif
images.pif
New_Napster_Site.DOC.scr
news_doc.scr
Me_nude.AVI.pif
Pics.ZIP.scr
README.TXT.pif
s3msong.MP3.pif
searchURL.scr
SETUP.pif
Sorry_about_yesterday.DOC.pif
YOU_are_FAT!.TXT.pif

With the second variant the attachment name is created from three sections. The first part is chosen from the possibilities:

fun
Humor
docs
info
Sorry_about_yesterday
Me_nude
Card
SETUP
stuff
YOU_are_FAT!
HAMSTER
news_doc
New_Napster_Site
README
images
Pics

The second part is chosen from the possibilities:

.DOC.
.MP3.
.ZIP.

and the last part from the possibilities:

pif
scr

Do Not Open The Attachment!

Contact NIH Help Desk for assistance:
866-319-4357 (toll free), 301-496-4357 (6-HELP) (local), 301-496-8294 (TDD)
http://ithelpdesk.nih.gov/support
Register for iForgotMyPassWord

Center for Information Technology
National Institutes of Health
Bethesda, Maryland 20892

Questions or Comments | Disclaimers | Privacy Policy

Health and Human Services
Washington, D.C. 20201

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -