Virus.Lurka.A

Virus.Lurka.A is a file infecting virus which targets Windows executable files with .exe extensions. This virus was first released on 7 October, 2008. This virus infects files with a system date which is older than 1 January, 2008. It also operates under various aliases, some of which are:

W32/Backdoor2.MWN
IM-Worm.Win32.VB.ln
W32/Lurka.a
W32/Bifrose.SQK
W32/Lurka.B
W32/Lurka-A
W32.Imaut.AS
WORM_VB.MAB
PE_LURKER.A-O

Virus.Lurka.A enters the system surreptitiously through compromised online sites and third party websites. When an infected executable file is run, it will attempt to infect other executables too. It will do this by determining its targets’ file dates, and if it is equal to or less than 31 December 2007, the virus will attempt to infect that executable file.

Once Virus.Lurka.A manages to securely root itself in the system, it will drop the following files into the system:

\drivers\opengl.sys - Worm:WinNT/Lurka.A
\wupdate$!.tmp - temp file used by the virus

It will also attempt to copy itself in the filename autorun.exe, so that it can copy itself automatically without any user interaction being required.

In order to protect your PC and network against this threat, you will need to destroy Virus.Lurka.A with the help of a powerful security tool. This will protect your PC against similar future attacks as well as annihilate Virus.Lurka.A from the system. This is the only way you will be able to limit the damage this virus will cause to your PC.