Description:
To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.
Malware Overview
This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web site(s). It may arrive via removable drives.
Upon execution, it creates folders. It creates registry entries to enable its automatic execution at every system startup.
It drops a file in the Windows Startup folder, which is a link to a copy of this worm. The said routine enables its automatic execution at system startup. When run, it displays an image.
This worm also drops copies of itself in all removable drives. It also drops an AUTORUN.INF file to automatically execute the dropped copies when the drives are accessed.
It drops files onto the affected system. Files of this worm have the icon of Microsoft Word documents.
For additional information about this threat, see:
Solution
Technical Details
Description created: Oct. 9, 2008 11:18:08 PM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|
Save & Share
