W32.Sillyban.A propagates by copying itself to unsecured mapped network drives. It may display warning messages if infected computer visited Orkut and YouTube.

W32.Voterai can propagate via removable media drives. It displays an image about a presidential candidate Raila Odinga.

W32.Debanpass spreads by copying itself to all drives found on the compromised computer. This worm can steal sensitive  information including banking details.

W32.Niuniu can propagate via unsecured network shares and removable media storage devices by means of infected .html files.

W32.Niuniu!inf is a heuristic detection for files that may have been infected by the W32.Niuniu worm.

JS.Harunaut is a malicious java script that attempts to spread through unsecured mapped network drives using the file Autorun.inf. It also adds “Haha” on Internet Explorer window.

VBS.Stemclover can disable opening or running various software on the infected computer. It propagates by copying itself to removable media storage devices.

W32.Stemclover can drop a copy of VBS.Stemclover onto the computer. It spreads by copying itself to network shares and removable media storage devices.

W32.Badday.A spreads through removable storage devices. This worm can reduce security settings on the infected computer

W32.Fleck.A spreads via unsecured file-sharing networks and is capable of downloading and executing additional threats onto the infected computer.