Threat Description



Category: Malware
Type: Virus
Platform: W32
Aliases: Keypress, Turku, Jeddah, Twins


The length of the virus is either 1232 (COM) or 1472 (EXE) bytes, depending on the file type.

The virus will activate when it has been in memory for 30 minutes. After that it will start interfering with the keyboard, by occasionally repeating the pressed key several times.

Keypress may also display the string "OOOOOOOOOOOOOOOO" on the screen, and emit beeps from the system speaker.

There are several variants of this virus, some of which seem to have been written in USA, Australia and Singapore.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More