Full Version of this article can be found here

tkbellexe.exe

What Is It?
W32.Lovgate.AO@mm - TkBellExe.exe
What Does it Do?
W32.Lovgate.AO@mm is a mass-mailing worm that propagates through open network shares and prepends itself to .exe files.

The email has a variable subject and attachment name, with a .bat, .cmd, .com, .exe, .pif, .scr, or.zip file extension.

Copies itself to:
%System%TkBellExe.exe
%System%Update_OB.exe
%System%hxdef.exe
Removal Instructions
@ Symantec