The UNIX and Linux Forums  

Go Back   The UNIX and Linux Forums > Special Forums > Security > Malware Advisories (RSS)
Google UNIX.COM
Home Forums Register Rules & FAQ Members List Arcade Search Today's Posts Mark Forums Read


Malware Advisories (RSS) Malware Security Advisories Via RSS


Other UNIX.COM Threads You Might Find Helpful
Thread Thread Starter Forum Replies Last Post
Worm_autorun.apr iBot Malware Advisories (RSS) 0 04-28-2008 12:10 AM
Worm_autorun.anj iBot Malware Advisories (RSS) 0 04-27-2008 12:00 AM
Worm_autorun.bbm iBot Malware Advisories (RSS) 0 04-22-2008 11:00 PM
Worm_autorun.anf iBot Malware Advisories (RSS) 0 04-19-2008 06:00 AM
Worm_autorun.tg iBot Malware Advisories (RSS) 0 12-26-2007 05:00 AM

Reply
 
Submit Tools LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 04-29-2008
iBot's Avatar
RSS Robot Girl
 

Join Date: Sep 2000
Posts: 14,108
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiReddit! Stumble this Post!Spurl this Post!
Worm_autorun.aij

This worm may be downloaded from remote sites by other malware, specifically by WORM_ONLINEG.AC.
It drops copies of itself. It drops files/components.
It creates registry entries to enable its automatic execution at every system startup. It modifies registry entries to hide files with both System and Read-only attributes.
It drops copies of itself in all physical drives. It drops copies of itself in all removable drives. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.
It then executes the downloaded files. As a result, malicious routines of the downloaded files are exhibited on the affected system.
It deletes itself after execution.


More...
Reply With Quote
Google UNIX.COM
Forum Sponsor
Reply



Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 03:27 PM.


Powered by: vBulletin, Copyright ©2000 - 2006, Jelsoft Enterprises Limited.
The UNIX and Linux Forums Content Copyright ©1993-2008 The CEP Blog All Rights Reserved -Ad Management by RedTyger

Search Engine Optimization by vBSEO 3.1.0

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102