- Joined
- Mar 5, 2002
- Messages
- 25,752
- Reaction score
- 1,211
I-Worm.Bajar description: Worm Bajar spreads by e-mail in letters with infected attachments. When a user executes the worm's file, it starts its own process, which uses Microsoft Outlook mail client to send copies of the worm to other users. It also tries to delete some of the critical system files. Then an infected computer may function improperly.
Properties:
• Hides from the user
• Stays resident in background
Got into the workshop this morning to be greeted with a 'pop-up' from KAV telling me I was infected with the I-Worm.Bajar ... to be more specific TKCP.UD was infected ... and could only be quarantined.
KAV could not delete it until I stopped UD (United Devices, cancer research) from running.
If this was an infestation, and not a false positive from KAV, we are in for some serious trouble. It seems to have been 'attached' to a UD work unit, if that is true.