CPU Help Blog

TwittWorm.A is a worm that uses Twitter and Messenger in order to spread, sending a malicious tweet or message to all followers or contacts of the infected user.

The malicious messages appeal to the curiosity of users, with subjects such as “I just got a piercing and you’ll never guess where! Take a look at the photo. ” or “You’re going to be mad at me for sending you this photo, but you NEED to see it :3″

TwittWorm.A edits the registry so the system CANNOT be restored or started in Safe Mode. It also makes a series of changes to the host file to prevent users from accessing certain Web pages, particularly those related with antivirus companies.

Another feature is that it prevents the running of certain programs for viewing active processes or monitoring network traffic. Twittworm.A also spreads through USB devices, creating an autorun.inf to automatically infect computers on connection.

Beware/Be Aware!