Full Version of this article can be found here


What Is It?
W32.Lovgate.AO@mm - TkBellExe.exe
What Does it Do?
W32.Lovgate.AO@mm is a mass-mailing worm that propagates through open network shares and prepends itself to .exe files.

The email has a variable subject and attachment name, with a .bat, .cmd, .com, .exe, .pif, .scr, or.zip file extension.

Copies itself to:
Removal Instructions
@ Symantec