Sophos

Sophos blogs

W32/Karab-A

Category
Type
What to do
Prevalence low high

Summary

 
How it spreads
  • Removable storage devices
Affected operating systems Windows
Protection available since 2 February 2009 15:43:11 (GMT)
Last updated 7 February 2009 15:51:32 (GMT)
Detected by All Sophos products
  • Free virus, spyware, and adware scan
  • Test your existing anti-virus protection
  • Find threats your anti-virus missed

Action

More Information

W32/Karab-A is a USB aware worm.

W32/Karab-A may display a picture of Barack Obama on your computer.

When W32/Karab-A infects it will copy itself to many areas on the system. Folders will have a file created in them with the name "<Folder Name> .exe" and "readme.txt .exe" (typically ~90 spaces).

W32/Karab-A will also create:

Autorun.inf
Sandisk.exe
Bootsect.dll
"readme.txt .exe"

RSS|Atom
Get reports about the latest virus and spyware threats delivered to your computer