W32/Karab-A

Category: Viruses and Spyware Protection available since:07 Feb 2009 11:55:14 (GMT)
Type: Win32 worm Last Updated:07 Feb 2009 11:55:14 (GMT)
Prevalence: Small Number of Reports

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

W32/Karab-A is a USB aware worm.

W32/Karab-A may display a picture of Barack Obama on your computer.

When W32/Karab-A infects it will copy itself to many areas on the system. Folders will have a file created in them with the name "<Folder Name> .exe" and "readme.txt .exe" (typically ~90 spaces).

W32/Karab-A will also create:

Autorun.inf
Sandisk.exe
Bootsect.dll
"readme.txt .exe"

download Try Sophos products for free
Download now