Malware type: Worm

In the wild: Yes

Destructive: No

Language: English

Platform: Windows NT, 2000, and XP

Encrypted: No

Description: 
This memory-resident worm has backdoor capabilities that exploit the vulnerabilities discussed in the following pages:

• Microsoft Security Bulletin 03-026
• Microsoft Security Bulletin 03-001
• Microsoft Security Bulletin 03-007

This worm propagates through network shares. It also has backdoor capabilities by using its built-in Internet Chat Relay (IRC) engine to open port 6667 and connect to an IRC channel.

It is also capable of stealing the CD keys of popular Windows-based games and terminating programs.

This worm is also capable of launching denial of service (DoS) attacks. It can also prevent the user from accessing certain antivirus and security-related sites.

This worm runs on Windows NT, 2000 and XP platforms.

For additional information about this threat, see:
Solution
Technical Details

Description created: May. 16, 2004 10:39:06 PM GMT -0800

Search a new malware

Tell us how we did. Take our quick survey.