| Description:
|
Details
PSW-Worm
If you receive notification that a PSW-Worm has been detected, this means that the file that has been scanned is a stored password protected ZIP file (stored means that the file is effectively uncompressed) which contains a file with one of the extensions from the following list:
bat
cmd
com
exe
pif
scr
Such files are often detected in connection with several mail worms which have been spreading recently in password protected files. In such cases, the password will be shown in the message body. When scanning such messages, Kaspersky Anti-Virus searches for passwords and then scans the attached file using the password found.
If no password is included, or if the attached file is scanned separately from the message, then the message will be flagged as suspicious when scanned by Kaspersky Anti-Virus with the heuristic analyser enabled. The file will be flagged as being 'possibly infected by PSW-Worm', as such files are characteristics of a range of mail worms. |
