Summary

This is a variant in the Maldal email worm series. So far there are at least seven variants in this family.

This variant is compressed using the Aspack compression utility, and is 27136 bytes long.

Spreading description

The worm renames the infected computer (ComputerName) to "ZaCker".

Because of this the subject and attachment name will often be "ZaCker" as the worm uses computername for mail subject and attachment name.

Threat description

The worm attepts to delete a lot of files, including several antivirus installations.

Removal

General information about removal of malicious software

Norman's antivirus products are in general able to remove all malicious software that is detected.
Some malware, however, uses techniques that the general product does not remove sufficiantly. We have therefore developed the free product Norman Malware Cleaner. Please use the latest version of this program from the link below - if your Norman antivirus is unable to clean-up the infection.

Utilizzo	Titolo	Commento
	Blocco dei virus che infettano le condivisioni di rete
	Cleaning of back-up folders on Windows Me and XP