Description:
To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.
Malware Overview
This worm may be downloaded from remote Web sites by other malware. It may also be dropped by other malware or arrive via network shares.
When executed, it creates registry entries to enable its automatic execution at every system startup. It searches the network for certain shares, into which it attempts to drop copies of itself.
It also spreads by logging on to target systems using any of the certain passwords. It also attempts to establish a connection to various IP addresses in TCP Port 445. It also propagates by taking advantage of the following vulnerability discovered in certain Microsoft operating systems:
For additional information about this threat, see:
Solution
Technical Details
Description created: Nov. 23, 2008 9:55:32 PM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
