Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Worm_sohanad.fm

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Worm_sohanad.fm
# 1  
Old 01-02-2008
Worm_sohanad.fm
This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this worm drops several copies of itself. It then uses the Windows Task Scheduler to create a scheduled task that executes the dropped copy. This worm also creates a registry entry to enable its automatic execution at every system startup.
It also drops non-malicious component files with Hidden and System attributes.
It modifies a registry entry to enable its automatic execution at every system startup. This worm also creates registry entries to disable the Task Manager.
This worm drops copies of itself in all physical and removable drives. It also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed.
This worm connects to URLs to download possibly malicious files. As of this writing, however, the said URLs are inaccessible.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT REDHAT

vermiculate

XScreenSaver(1) 					      General Commands Manual						   XScreenSaver(1)

NAME

       vermiculate - to move in a worm-like manner.

SYNOPSIS

       vermiculate [-display host:display.screen] [-visual visual] [-window] [-root]

DESCRIPTION

       Draws squiggly worm-like paths.

OPTIONS

       -visual visual
	       Specify which visual to use.  Legal values are the name of a visual class, or the id number (decimal or hex) of a specific visual.

       -window Draw on a newly-created window.	This is the default.

       -root   Draw on the root window.

ENVIRONMENT

       DISPLAY to get the default host and display number.

       XENVIRONMENT
	       to get the name of a resource file that overrides the global resources stored in the RESOURCE_MANAGER property.

SEE ALSO

       X(1), xscreensaver(1)

COPYRIGHT

       Copyright (C) 2002 by Tyler Pierce.  Permission to use, copy, modify, distribute, and sell this software and its documentation for any pur-
       pose is hereby granted without fee, provided that the above copyright notice appear in all copies and that both that copyright  notice  and
       this permission notice appear in supporting documentation.  No representations are made about the suitability of this software for any pur-
       pose.  It is provided "as is" without express or implied warranty.

AUTHOR

       Tyler Pierce.

X Version 11															   XScreenSaver(1)