W32.Badtrans.B@mm and Macs: a follow-up
W32.Badtrans.B@mm and Macs: a follow-up
Dan Poynter writes: "The virus modifies the sender's email address in the message by adding an underscore (billybob@hotmail.com becomes _billybob@hotmail.com), so to inform the sender that they are infected, you must delete the underscore from the reply-to address to avoid getting undeliverable mail returned."
Dan Poynter writes: "Apparently, the Badtrans virus will also pick up subject titles of other emails in a user's mailbox; I notified one sender in an email with the subject 're: you have the badtrans virus', and about an hour later I received another virus from her, this time with the subject 're: re: you have the badtrans virus.' So far, since yesterday morning I have received virus emails over 20 times."
Bruce Stevens adds: "It seems that this virus will send replies to UNREAD emails in an infected user's mailbox."