0 Members and 1 Guest are viewing this topic.
When the worm is triggered, it works to shut down any security and antivirus programs residing on a user's PC. It then attempts to spread by searching the PC's Windows address book for e-mail addresses, sending itself as an attachment to each of the addresses it finds. If a user has peer-to-peer program Kazaa installed, the Avril worm also places a copy of itself in the Kazaa file-sharing folder. This file is randomly named, which means file swappers could unwittingly download it. The worm also can spread through the ICQ and mIRC chat programs. Last but certainly not least, this malware also attempts to download a backdoor program and send any parsewords it can find to an e-mail account in Russia.