Worm:Win32/Shard.A

Detected by Microsoft Defender Antivirus

Aliases: Trojan.Win32.Badur.gbae (Kaspersky) Troj/Dloadr-DTW (Sophos)

Summary

Windows Defender Antivirus detects and removes this threat.

This worm spreads via peer-to-peer file sharing networks.

If you downloaded this program onto your PC and copied it onto your Android device, then the following free Microsoft software detects and removes this threat on your PC:

Microsoft Security Essentials or, for Windows 8, Windows Defender
Microsoft Safety Scanner

Even if we've already detected and removed this particular threat, running a full scan might find other malware that is hiding on your PC.

You can also visit the Microsoft virus and malware community for more help.

If the following programs are installed:	The malware can copy itself to the following folders:	Using one of the following file names:
bearshare eMule grokster kazaa shareaza	%programfiles%\bearshare\shared\ %programfiles%\emule\incoming\ %programfiles%\grokster\my grokster\ %programfiles%\kazaa lite k++\my shared folder\ %programfiles%\kazaa lite\my shared folder\ %programfiles%\kazaa\my shared folder\ %programfiles%\shareaza\downloads\	adobe-crack.exe applejuice-crack.exe ares-crack.exe bearshare-crack.exe bittorrent-crack.exe bittorrent_dna-crack.exe common files-crack.exe complus applications-crack.exe difx-crack.exe e-crack.exe edonkey2000-crack.exe emule-crack.exe gnucleus-crack.exe grokster-crack.exe gum1.tmp-crack.exe icq-crack.exe internet explorer-crack.exe kazaa lite k++-crack.exe kazaa lite-crack.exe kazaa-crack.exe kmd-crack.exe komoku-crack.exe limewire-crack.exe messenger-crack.exe microsoft activesync-crack.exe microsoft frontpage-crack.exe microsoft office-crack.exe microsoft.net-crack.exe morpheus-crack.exe movie maker-crack.exe mozilla firefox-crack.exe mozilla maintenance service-crack.exe msbuild-crack.exe msn gaming zone-crack.exe msn-crack.exe netmeeting-crack.exe online services-crack.exe outlook express-crack.exe overnet-crack.exe rapigator-crack.exe reference assemblies-crack.exe shareaza-crack.exe swaptor-crack.exe tesla-crack.exe uninstall information-crack.exe windows media player-crack.exe windows nt-crack.exe windowsupdate-crack.exe winmx music-crack.exe winmx-crack.exe xerox-crack.exe xolox-crack.exe

Worm:Win32/Shard.A

Summary

What to do now

Technical information

Threat behavior

Installation

Spreads via…

Payload

Prevention

Symptoms

System changes