W32.Screentief is a worm that will capture screenshots on infected computer and sends it via email or FTP protocol. W32.Screentief propagates by creating a copy of itself on removable USB drives.

W32.Stiraut is a worm that will automatically submit a comment to social networking sites by randomly choosing an ID from %Windir%sliame.dll file. W32.Stiraut propagates via removable USB storage drives.

W32.Feberr propagates on removable drives and unsecured shared folders over a network. W32.Feberr can infect various files on the computer specially executable ones to further infect other computers.

W32.Koobface.D is a worm that propagates via social networking websites by creating a malicious links that will lead to an infection. W32.Koobface.D may gather sensitive information on the compromised computer and sends it to the remote attacker. 

W32.SillyFDC.BCQ is a worm that propagates by infecting USB removable drives and via file-sharing networks. W32.SillyFDC.BCQ can creat its own registry entry so that the worm starts each time Windows is run.

W32/Bagle-AJ is a variant of I-Worm.Bagle family of worms that will display fake error messages when first executed on computer. It will spread to another computers by extracting an e-mail addresses and uses those to send a copy of spam message with W32/Bagle-AJ attached to it.

Email-Worm.Win32.Merond.a is a worm that will spread as an attached file to spam email messages coming from an infected computer. To make sure that it will run on computer each time Windows is started, Email-Worm.Win32.Merond.a will create its own registry entry.

W32.Palevo is a worm that may infect computer by exploiting known software vulnerabilities. This worm will also create its own registry entries to run itself when Windows is started. W32.Palevo will also end security-related process on infected computer that can lower security settings.

W32.Fujacks.CB is a USB removable drive spreading worm that will create an autorun.inf file on infected drives to run the worm when the drive is accessed or mounted. W32.Fujacks.CB can also spread on unsecured network drives by creating a copy of itself on target network drives.

W32.SillyFDC.BCO is an autorun worn that will spread by creating a copy of  itself on removable storage drives. It uses an Autorun.Inf file to execute W32.SillyFDC.BCO when the infected drive is executed.