The W32/VKon-A worm executes its payload at 10am on the 25th of any month, wiping all files on the users C: drive. Sophos products were already capable of detecting it proactively as Mal/Generic-A. More information about this threat, including a screen capture of the cartoon it displays when it runs, can be found on the Naked Security website. Follow Graham Cluley on Twitter to read more of the exclusive content we post.”]
Source: https://grahamcluley.com/russian-social-networking-worm-wipes-hard-drive-files/