The fix on this page below only works for BadTrans.B
Click here for BadTrans.A
Instructions For Removing BadTrans.B
- Developed by Axel Pettinger and Andrew Lee
Please make sure you read these instructions fully before proceeding.
|
Instructions for Windows 95/98
(untested on ME, but may work)
- Download the file rembadtransB.zip
(zipped archive containing a batch file called rembadtransB.bat)
- Unzip to a local directory
- Run the file "REMBADTRANSB.BAT"
- Follow the instructions carefully!
- Reboot your machine when prompted
- You should now change your passwords since they may have been made known to others.
|
Instructions for Windows NT/2000
For Windows NT and 2000 the procedure is slightly more complicated.
- Download the file rembadtransBNT.zip
(zipped archive containing a batch file called rembadtransBNT.bat)
- Unzip to a local directory
- Now run the file "REMBADTRANSBNT.BAT"
- Follow the instructions carefully!
- Reboot your machine
- You should now change your passwords since they may have been made known to others.
|
|
|
It would be a good Idea to scan your machine regularly with an Anti-Virus scanner.
Also, follow this link to read about the vulnerability BadTrans.B depends on and patch your system.
Important: The email address of every person who got the BadTrans.B worm from YOU
was written to the file PROTOCOL.DLL in encoded form. You'll find the
file in your Windows\System directory (Windows NT/2000: WinNT\System32).
To get the list and warn the recipients simply download baddec.zip
(author: Andreas Weller), extract the
BADDEC.EXE into the Windows\System directory, execute it and enter the
name PROTOCOL.DLL into the window.
|
