I got the dammed beast 40 times today! :-( Attention! The virus WORM_BADTRANS.B spreads heavy in wild! If you noticed an unknown email with an attachment about 40 kb in size the subject line only displaying RE: be careful! This memory-resident Internet worm is a variant of WORM_BADTRANS.A. It propagates via MAPI32, has a Key Logger component, and arrives with randomly selected double-extension filenames. It does not require the email receiver to open the attachment for it to execute. It uses a known vulnerability in Internet Explorer-based email clients (Microsoft Outlook and Microsoft Outlook Express) to automatically execute the file attachment. This is also known as Automatic Execution of Embedded MIME type. Hit Read More to learn how to remove the virus. Delete the %System%CP_25389.NLS file. Click Start>Run, type Regedit then hit the Enter key. Double click the following: HKEY_LOCAL_MACHINE>Software>Microsoft >Windows>CurrentVersion>RunOnce In the right panel, look for following registry value: kernel32 Click the registry value and then Delete it. Restart your system. All big antivirus software firms have updated their virus defintion, make sure to get the latest!
For an online scan on TrendMicro click