Malware type: Worm

Aliases: Email-Worm.Win32.Kitro.d (Kaspersky), W32/Duni.worm.c (McAfee), W32.Kitro.A.Worm (Symantec), Worm/Kitro.D (Avira), W32/Kitro-D (Sophos),

In the wild: No

Destructive: Yes

Language: English

Platform: Windows

Encrypted: No

Description: 
This destructive worm drops a Visual Basic Script (VBScript) file, which Trend Micro antivirus detects as VBS_ARGEN.A. This VBScript file sends WORM_ARGEN.A to all email addresses in the infected user’s Microsoft Outlook address book.

This worm deletes all non-hidden files found in the root directory of Drive C:\ and drops several copies of itself.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jul. 5, 2002 9:19:38 AM GMT -0800
Description updated: Jul. 5, 2002 10:25:19 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.