The Internet threat alert status is currently normal. At present, no major epidemics or other serious incidents have been recorded by Kaspersky Lab’s monitoring service. Internet threat level: 1


Detected Jun 19 2010 13:28 GMT
Released Jun 19 2010 22:15 GMT

There is currently no description for this program

If you’d like to find out more about how programs of this type function, please read about the general behavior of programs in the same class or sub-class (see right).

Because many programs of this type are slight modifications of older versions, the descriptions for these older versions may be of interest. Links to any available descriptions are displayed under the general description on the right of the screen.

If you can’t find a suitable description on our site, you can get more help from the Contact Us section.

Bookmark and Share

Worms spread on computer networks via network resources. Unlike Net-Worms, a user must launch a Worm in order for it to be activated.

This kind of worm searches remote computer networks and copies itself to directories that are read/write accessible (if it finds any). Furthermore, these worms either use built-in operating system functions to search for accessible network directories and/or they randomly search for computers on the Internet, connect to them, and attempt to gain full access to the disks of these computers.

This category also covers those worms which, for one reason or another, do not fit into any of the other categories defined above (e.g. worms for mobile devices).


Worm.MSIL.Arcdoor.h (Kaspersky Lab) is also known as:

  • Generic Worm (Panda)
  • W32/Trojan2.MYOZ (FPROT)
  • Worm:MSIL/Arcdoor.A (MS(OneCare))
  • MSIL/Restamdos.AA trojan (Nod32)
  • Worm.Generic.261627 (BitDef7)
  • Worm.MSIL.MW (VirusBuster)
  • Win32:Malware-gen (AVAST)
  • Worm.MSIL (Ikarus)
  • WORM/MSIL.Arcdoor.H (AVIRA)
  • W32/Smalltroj.YYAI (Norman)
  • Worm.MSIL.Arcdoor.h [AVP] (FSecure)
  • Trojan.Win32.Generic!BT (Sunbelt)
  • Worm.MSIL.MW (VirusBusterBeta)