This is a worm which arrives as an email attachment with the name
BADASS.EXE. If the attachment is executed, it uses Microsoft Outlook to spread itself automatically.

Infected emails will usually have the subject "Moguh..", although the character set used may cause some mailers to display it as
"=?Windows-1252?B?TW9n+2guLg==?=". The message itself contains the Dutch text "Dit is wel grappig! :-)", which means "This is really funny".

Before spreading, the worm pops up a message box asking a highly offensive question:
"An error occured probably because your *** smells bad. Is it really so?".

Although "Yes" or "No" buttons are displayed, the "No" button moves away from the mouse cursor and cannot be clicked.  When "Yes" is clicked, the worm displays a second message:
"Contact your local supermarket for toiletpaper and soap to solve this problem.".

It then sends itself in a new email message, as described above, to all the entries in your Outlook address book.

The worm then creates the registry key:

HKCU\Software\VB and VBA Program
Settings\Windows\CurrentVersion\CMCTL32

And it sets the value to "00 00 00 01"

If the worm is run again, it does not send any further email messages. The worm does not install itself on the system and Trend users are advised to delete the file BADASS.EXE.

Like all e-mail-based viruses, Badass exists as an attachment to an e-mail message and will not execute unless you open the attached file. That's good. Prudent computing dictates that you should never open an unknown file, or a file from an unknown user. It's important to bear in mind that e-mail viruses cannot execute unless you open the attached
file.