Worm_nuwar.ul


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Worm_nuwar.ul
# 1  
Old 12-29-2007
Worm_nuwar.ul

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may also be downloaded unknowingly by a user when visiting malicious Web sites.
It drops a copy of itself. It also drops a component.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating a registry key
It gathers target email addresses from files with certain file name extensions. It avoids sending email messages to addresses containing certain strings.
This worm uses its own Simple Mail Transfer Protocol (SMTP) engine to send the email. Having its own SMTP engine allows it to send messages without using any mailing application, such as Microsoft Outlook. It then uses the Gmail and Yahoo! Mail addresses it has gathered to spoof the From field of the email message it sends out.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
CATDIC(1)						      General Commands Manual							 CATDIC(1)

NAME
catdic - Download a dictionary SYNOPSIS
catdic [{-cs|-cannaserver} canna-server] [-i|-u user-name] remote-dic [-l local-file] DESCRIPTION
catdic downloads a dictionary file to the current directory. The file downloaded is a dictionary file the dictionary name of which is remote-dic. It is in the user dictionary directory of the machine on which cannaserver(1M) is in operation. (Hereafter, this machine is called the remote host.) OPTIONS
-cs canna-server (or -cannaserver canna-server) Specifies the name of the server machine that contains a dictionary to be downloaded. -i Downloads the system dictionary. -u user-name Specifies the user name. Another user's dictionary can be referenced by this user name. -l local-file local-file is the dictionary file name. If it is omitted, the standard output will be assumed. EXAMPLES
% catdic test Outputs the contents of dictionary file ``test'' on the remote host, to the standard output. % catdic test -l test2.t Downloads dictionary file ``test'' on the remote host to current directory file ``test2.t''. SEE ALSO
cannaserver(1M), lsdic(1), mkdic(1) CATDIC(1)