Description:
This worm arrives as attachment to email messages spammed by another malware or a malicious user.
It drops copies of itself. It drops files/components.
It creates registry entries to enable its automatic execution at every system startup.
It uses its own Simple Mail Transfer Protocol (SMTP) engine to send email messages with a copy of itself as attachment. It gathers target email addresses from files with certain file name extensions. It gathers target email addresses from the Windows Address Book (WAB).
It attempts to access Web sites to download files, which are possibly malicious. As of this writing, however, the said sites are inaccessible.
It creates mutex(es) to ensure that only one instance of itself is running in memory.
For additional information about this threat, see:
Solution
Technical Details
Description created: Jun. 18, 2009 9:38:30 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
