W32/Avril-A, W32/Avril-B and W32/Avril-C can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

W32/Badtrans-A, Troj/Keylog-C, W32/Badtrans-B and Troj/PWS-AV can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

W32/Bagle-A, W32/Bagle-C, W32/Bagle-D, W32/Bagle-E, W32/Bagle-F, W32/Bagle-G, W32/Bagle-H, W32/Bagle-I, W32/Bagle-J, W32/Bagle-K, W32/Bagle-N, W32/Bagle-Q, W32/Bagle-R, W32/Bagle-U, W32/Bagle-AA, W32/Bagle-AF, W32/Bagle-AG, W32/Bagle-AI, W32/Bagle-AN, W32/Bagle-AQ, W32/Bagle-AU, W32/Bagle-AZ and W32/Bagle-BW can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

At the time of writing, W32/Blaster-A (also known as: W32/Lovsan.worm, W32.Blaster.Worm, WORM_MSBLAST.A) is spreading in the wild. W32/Blaster-A is a worm that scans networks looking for computers vulnerable to Microsoft's DCOM RPC security exploit. On finding a suitable victim the worm causes the remote machine to acquire a copy of the worm using TFTP, which is saved as msblast.exe in the Windows system folder.

W32/Bobandy-C can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

W32/Bobax-D can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

W32/Bofra-A, W32/Bofra-B and W32/Bofra-C can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.

W32/Brontok-AJ can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers using the following Resolve tools. For more information, see the release notes provided with the BRONTCLI tool.

RMBGBEAR is a utility for disinfecting the W32/Bugbear-A worm. This worm infects most 32-bit Windows platforms (Windows 95, 98, Me, 2000 and XP). It may be dropped on Windows NT, but has not been observed to run. It can spread by copying itself across networks and by sending out infected emails which exploit MIME and IFRAME vulnerabilities. It also sends itself to printers, which print out its executable code.

W32/Cuebot-D, W32/Cuebot-L, W32/Cuebot-M and W32/Hwbot-B can be removed from Windows 95/98/Me and Windows NT/2000/XP/2003 computers automatically with the following Resolve tools.