W32.Mabezat.A
W32.Mabezat.A can propagate via unsecured network shares and removable storage devices. The worm will drop autorun.in file so that it will run whenever the drive is accessed. It was identified as a blended threat of polymorphic worm, virus and Autorun worm. W32.Mabezat.A will display a message if the logged on user has an administrative privilege:
“You are Admin!!! Your Computer Will Not Be Infected!!!”
Damage Level: Medium
Systems Affected: Windows 9x, 2000, XP, Windows Vista
Technical Details and Additional Information:
What can W32.Mabezat.A do to infected system?
- The worm will drop files called ZPharaoh.exe and autorun.inf.
- It will search for .exe file and compromised them.
- Encrypts data file found on the infected system.
Anti-virus Tools
Scan with Portable Antivirus:
Most of the time, Trojan associated with a rogue program will disable Windows functionalities and prevent the compromised computer from executing any application including antivirus program locally installed. If this happens, you can try using a McAfee Portable Antivirus called Stinger. It can be downloaded for free.
Online Virus Scanner:
Online virus scanner can provide scan and clean functions just like any anti-virus software without the need to install additional AV product. Perform a thorough scan with free Online Virus Scanner that can be found on websites of legitimate security software provider.
fahad
Apr 01, 2008 @ 05:45:03
Thanks, I will check.
zunk
Oct 23, 2009 @ 14:55:19
Is virus spread from the burn cd…when I had burn cd there was sality virus now my pc shows mabezat.a virus…what is happening…please send me the solution.
alshirwin
Mar 11, 2010 @ 02:11:36
why does my psp has shown mabezat virus