A W32/Hairy-A worm is spreading and it’s taking advantage of the Harry Potter events which are the fifth movie and the new book.

The worm copies itself onto USB memory drives that are attached to a user’s computer. If the memory drive got infected and if the user plugs the memory drive onto another computer, that other computer will receive the worm too.

The filename of the worm is HarryPotter-TheDeathlyHallows.doc. If a user opens the file, he or she will read a message that contains four words. The words are: Harry Potter is dead.

Users can find out that they are infected because the worm creates new Windows user accounts which are named after Harry Potter characters.

Source: News.com.au