Description:
This worm may be downloaded from remote sites by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.
It drops various files on the affected system, including a copy of itself. It creates and modifies registry entries as part of its installation routine.
It drops a copy of itself in all physical and removable drives.
It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed. In addition, it searches for .ZIP files in physical drives. It then add a copy of itself in the files found.
It modifies the system's HOSTS files to prevent users from accessing certain Web sites. It also connects to a possibly malicious URL.
For additional information about this threat, see:
Solution
Technical Details
Description created: Jun. 2, 2009 12:14:56 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
