W32.Badtrans virus removal

[Dodge1]

To get rid of the badtrans, go to this site and download the free program. It's a very quick download, save it to your desktop and then run it.

http://securityresponse.symantec.com/avcenter/venc/data/w32.badtrans.b@mm.removal.tool.html

This virus is a pesky little critter. My Norton 2002 wouldn't even remove it when I booted in safe mode.

[Dodge1]

I picked up this little critter the same way Juls did. I was installing a program that strongly suggested that I disable my virus protection program. Being human, I forgot to turn it back on and of course one of my close friends sent me an email with, ah you guessed it already.

Right after I opened her email I remembered that I had disabled my virus program. So I ran a virus scan and it reported that badtrans had infected 3 files. Only problem is that Norton couldn’t remove the virus, quarantine it, or delete the infected files. That’s when I booted in safe mode but again Norton couldn’t remove the beast but at least it was able to quarantine the infected files.

Then I hotfooted over to the Norton’s website and found the removal program.

FYI – One little side effect of this program is it won’t allow you to run you’re email scan, until you remove it. Once removed you can reactivate you’re email scan.

After you have successfully removed the virus, please send everyone an email with the link for the removal program. It’s not necessary to have an anti virus program installed in your computer, in order to run the removal program.

[Juls_WI]

Thanks for the information Dodge1. You're right, that was easy... But, I downloaded it, ran it, and it told me that one file of the W32Badtrans.B@MM could not be deleted.

What now? I tried using the patches from microsoft, but it said I didn't need the update. The patch was for IE5.5 and IE5.01...I'm running IE6.

Help! lol

Grrrrr...

Juls

[Dodge1]

Juls,

Well there could be a couple of answers, so let's start with the easy one first.

If you quarantined that file, you need to remove the quarantine. Just go to you’re virus protection program and follow the instructions. Then run the badtrans removal program. That’s what I did, although the files were quarantined, I felt much safer having them permanently removed. Even if you can’t remember quarantining that file, check you’re virus protection program, just to make sure.

If your virus protection program indicates that there are no quarantined files. Go to your start menu, click on ‘help’, type in "safe mode", without the " ", and follow the directions.

Once you’re in safe mode, run the badtrans removal program. It should take care of that infected file. If it does not, run your regular virus protection program, while you’re still in the safe mode, and quarantine that file.

Have fun ;) and let me know how it all works out.

[Juls_WI]

Ok, I got the bugger off my puter...but I still can't "enable" "EmailScan" in my McAfee. I will try contacting McAfee to get some answers today.

Thanks for your help Dodge1. You're my hero...;-)

Juls

[DarrenB]

Even after you ran the virus removal tools it still won't let you do the email scan?? All infected files are deleted from the computer? Ok...Did you reboot the computer and then try enabling the scan? I ask because the virus writes entries to the registry that disables the virusscanning software. After the tools program removes those entries from the registry you may need to reboot the computer before the changes take effect.

[Dodge1]

Darren,

Good point. You have to reboot when you change anything in the registry, in order to have those changes take effect.

Have you changed any of the settings in you're registry? I just finished with a couple of memory performance tweaks and reprioritized my CMOS/real time clock, to priority 1. Nice gain in speed with Win XP.

Dodge