19 January 2006

The worm W32/Small.KI@mm has been spreading rapidly since the beginning of this week. This malware is infecting computers through emails and through open network shares.

Once your computer is infected the worm will start deleting your antivirus program files, leaving your computer more vulnerable to virus attacks. The third date of each month the worm will attempt to destroy a series of files, which may contain critical personal or corporate information, including Word and Excel documents.

The worm infects by email attachments and uses different email subjects when trying to trick users into opening emails and attachments. The users are safe as long as they do not open the attachments. In addition the worm will spread through "open network shares".

The problem with this worm is that it can be hard to remove once installed in larger networks. It can also make it easier for other malware (as well as itself) to propagate because it destroys antivirus programs.

Norman is able to detect and stop this worm.  Just remember to update your antivirus program by clicking on the Norman icon and select Internet update. The worm is not able to delete files belonging to Norman's antivirus products.