|
Description:
This memory-resident worm propagates via email messages. It sends a copy of itself to email addresses found in files with extension names starting with HT.
It can also propagate via network shares by dropping a copy of itself in the root directory of all network and fixed drives.
This worm can terminate certain processes that are associated with antivirus and security applications. It may also delete .DLL files found in different folders under C:\.
Upon execution, it drops a copy of itself on the affected system, as well as its Visual Basic scrtipt (VBS) component, which is detected by Trend Micro as VBS_ASSIRAL.A.
For additional information about this threat, see:
Solution
Technical Details
Description created: Feb. 24, 2005 8:22:45 PM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
