Andreas Weller's Badtrans Decoder

This program is a "quick and dirty" hack to decode Badtrans Virus'
protocol.dll file to retrive all eMail adresses the Virus spread to.

Simply start the exe and enter the Name of protocol.dll (with full
path information). I think it would be the best to copy protocol.dll
to the directory you extracted my decoder to.
You may also use Windows drag'n-drop function: simply drag protocol.dll
onto baddec.exe using Windows Explorer.
You can save the decoded eMail Adresses to protocol.txt if you wish.

If there are any question/bugs send eMail to:
weller@andreas-weller.de

===

Dieses Programm kann die Informationen, die der Badtrans Virus
in der Datei protocol.dll abgelegt hat entschlsseln und darstellen, so
dass Sie alle eMail Adressen sehen knnen, an die er sich weiterverbreitet
hat.
Geben Sie nach dem Start des Programms den Namen von protocol.dll ein (mit
kompletter Pfad Angabe). Es sollte am Besten sein, wenn Sie protocol.dll
in das gleiche verzeichnis kopieren, in dem baddec.exe liegt.
Sie knnen auch Windows drag'n drop benutzen:
ziehen sie im Explorer die protocol.dll Datei auf dei baddec.exe
Wenn Sie wnschen speicher der decoder die gewonnen Informationen in
der Datei protocol.txt.

Wenn Sie weitere Fragen haben schicken Sie eine eMail an:
weller@andreas-weller.de

14.01.2001


-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>
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=/i3S
-----END PGP PUBLIC KEY BLOCK-----