Skip to main content
Published Nov 12, 2007 | Updated Sep 15, 2017


Severe |Detected with Windows Defender Antivirus

Aliases: Worm.Win32.Mabezat.a (Kaspersky) W32/UA07 (McAfee) W32/VBTroj.ILP (Norman) W32/Mabezat-A (Sophos) W32.Mabezat.A (Symantec) Worm:Win32/Mabezat.A (legacy) (Microsoft)


Worm:Win32/Mabezat.A is a worm that attempts to spread by copying itself to newly attached media devices, such as USB drives or USB media cards, and even writable network drives. In some samples, Win32/Mabezat can also infect .EXE files by prepending its code to the host file.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see
Follow us