W32/Smallworm.AAI IRC-Worm.Win32.Agent.a

Hi!

The virus by Norman named IW32/Smallworm.AAI or by Kaspersky named IRC-Worm.Win32.Agent.a isn’t found by Avast 4.7. It seems to be a mess to remove. F-Secure finds it but will not remove it (from the computer I tried).

Will this be found by the next version of the virus-defintions? Or do I need to find a way to remove it manually?

Best regards
Roland

If you are (not) getting a virus warning that you believe is a new, undetected virus then if you can zip and password protect (‘virus’, will do) the suspect file and send it to virus @ avast.com (no spaces), or send from the chest (after adding it to the User Files section of the chest).

Give a brief outline of the problem (possibly a link to this thread), the fact that you believe it to be a either a new, undetected virus and include the password in the body of the email. Some info on the avast version and VPS number (see about avast {right click avast icon}) will also help.

What is the infected file name, where was it found e.g. (C:\windows\system32\infected-file-name.xxx) ?

Have you tried the Kaspersky on-line scanner since it can detect it ?

Also see http://www.sophos.com/security/analyses/w32kika.html for more detailed information on it W32/Kik-A is another name for the worm.win32.agent.a.

Since it also falls under spyware it may be detected and dealt with by some of the anti-spyware tools. However, this is a very new detection which is transmitted by email messages and attachments, so to become infected you have to either visit a link or open an attachment in an unsolicited email. Though, by the IRC prefix that would appear to be another route of entry.