Worm that Wreaked Havoc for US Military Likely a Progenitor of Red October
On infected systems, the Agent.btz worm creates a file named “thumb.dd” on all USB flash drives connected to the computer, using it to store information about the infected system and the worm’s activity logs. Given this functionality and the global scale of the epidemic caused by the worm, Kaspersky believes that there are tens of thousands of USB flash drives in the world containing files named “thumb.dd” created by Agent.btz at some point in time and containing information about systems infected by the worm.