Threat Description

Keypress

Details

Aliases: Keypress, Turku, Jeddah, Twins
Category: Malware
Type: Virus
Platform: W32

Summary


The length of the virus is either 1232 (COM) or 1472 (EXE) bytes, depending on the file type.

The virus will activate when it has been in memory for 30 minutes. After that it will start interfering with the keyboard, by occasionally repeating the pressed key several times.

Keypress may also display the string "OOOOOOOOOOOOOOOO" on the screen, and emit beeps from the system speaker.

There are several variants of this virus, some of which seem to have been written in USA, Australia and Singapore.



Removal


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More

Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.








SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More