Aliases: W32/Vidon.A, Virus.W32/Vidon.A, Win32.Vidon.A
Variants: Win32/Vidon.A, Virus.Win32.Vidon.A, Virus.Win32/Vidon.A

Classification: Malware
Category: Computer Virus

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 20 Oct 2006
Damage: Low

Characteristics: The W32.Vidon.A program is a virus that infects executable files and has the capability to drop Trojan.Dropper on to the compromised computer through network shares and removable storage devices. This virus affects Windows 95, Windows 2000, Windows 98, Windows NT, Windows Me, Windows Server 2003, and Windows XP.

More details about W32.Vidon.A

W32.Vidon.A virus infects executable files and drops Trojan.Dropper on to the compromised computer. This occurs when the virus is executed on the computer and creates the file ocmsn.old. This file is actually a copy of Trojan.Dropper and it could drop a copy of Backdoor.Haxdoor that opens a back-door on the compromised PC. The worm will now then search for .exe files on local drives and infects any of the .exe files it finds. When this virus is not removed it has the ability to drop another trojan and would again infect executable files on the infected computer.

The computer infected by the W32.Vidon.A program may run slower than usual. The processes of the added programs can use up RAM and available disk space. The Internet bandwidth is consumed by the communication with the remote server. This reportedly causes the connection to lag. The W32.Vidon.A program typically places its files in the Windows directory or the System subfolder. The components are commonly named as legitimate processes. This allows it to prevent being removed. The main executable file is also added as a value to the system registry. This allows the Trojan software to run at system startup.