Virus targets HTM, HTML, PHP and ASP web files, as well as executables. Sophos detected as W32/Scribble-A, and has been protected against since 3rd February. Virus is called Virut and Virux in a report from The Register based on a blog post from Trend Micro. Virus targets web files and executables as it spreads via network drives and USB sticks. Virus has been detected by Sophos as ‘Virut’ and ‘Virusut’ in the report.”]
Source: https://grahamcluley.com/fastinfecting-polymorphic-virus-causing-stir/