|
Description:
This worm drops copies of itself in several locations using varying file names. It also drops its backdoor components, which are detected by Trend Micro as WORM_LOVGATE.Q.
This worm uses two techniques to propagate via email. It uses MAPI (Messaging Applicaton Programming Interface), which replies to email messages stored in the system. It also utilizes its own SMTP (Simple Mail Transfer Protocol) engine to send an email using a spoofed email address.
This worm also drops copies of itself into network shares. It also scans all machines in the local area network and attempts to log on as administrator. If the login attempt is successful, this worm copies itself to the Windows system folder.
It may also act as a backdoor, which opens a random port on the infected system and steals vital information, which it saves and sends to the malware author.
It runs on Windows NT, 2000, and XP.
For additional information about this threat, see:
Solution
Technical Details
Description created: Jun. 21, 2004 5:43:12 AM GMT -0800
Description updated: Jun. 21, 2004 6:16:09 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
