Summary

Summary
Action
More Information
| How it spreads |
|
|---|---|
| Affected operating systems | Windows |
| Protection available since | 2 February 2009 15:43:11 (GMT) |
| Last updated | 7 February 2009 15:51:32 (GMT) |
| Detected by | All Sophos products |
- Free virus, spyware, and adware scan
- Test your existing anti-virus protection
- Find threats your anti-virus missed
Action

Summary
Action
More Information
Please follow the instructions for removing worms.
More Information
W32/Karab-A is a USB aware worm.
W32/Karab-A may display a picture of Barack Obama on your computer.
When W32/Karab-A infects it will copy itself to many areas on the system. Folders will have a file created in them with the name "<Folder Name> .exe" and "readme.txt .exe" (typically ~90 spaces).
W32/Karab-A will also create:
Autorun.inf
Sandisk.exe
Bootsect.dll
"readme.txt .exe"

