TrendLabs Malware Blog
Glossary
TrendWatch
TrendLabs Twitter
WORM_WALEDAC.DU
Overview

Malware type: Worm

Aliases: No Alias Found

In the wild: Yes

Destructive: No

Language: English

Platform: Windows 98, ME, NT, 2000, XP, Server 2003

Encrypted: No

Overall risk rating:


Reported infections:

Damage potential:

High

Distribution potential:

High

Description: 

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

WORM_WALEDAC.DU Behavior Diagram

This worm has received attention from independent media sources and/or other security firms.

It arrives as attachment to email messages it sends as spam. The said spammed message contains a link where a user may download a copy of this worm. It may be downloaded unknowingly by a user when visiting malicious Web sites. It may be hosted on a Web site and run when a user accesses the said Web site.

It also searches for email addresses found in fixed, network and RAM drives except files with certain extension names.

It connects to several IP addresses to send gathered information via HTTP POST. This routine allows this worm to send sensitive information to be used by remote users for possibly malicious activities.

For additional information about this threat, see:
Solution
Technical Details

Description created: Jul. 4, 2009 1:57:00 AM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.