Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Worm_autorun.bt

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Worm_autorun.bt
# 1  
Old 03-24-2008
Worm_autorun.bt
To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.

Image

Malware Overview


This worm may arrive as an attachment to email messages. It drops copies of itself and its DLL components in the current user's profile and Windows system folders. The said .DLL files are also detected by Trend Micro as WORM_AUTORUN.BT
It creates registry entries to enable its automatic execution at every system startup. It also modifies a certain registry entry as part of its installation routine.
It drops copies of itself in all removable drives. It also drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.


More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT MOJAVE

genworm

GENWORM(1)						      General Commands Manual							GENWORM(1)

NAME

       genworm - generate a RADIANCE description of a functional worm

SYNOPSIS

       genworm mat name 'x(t)' 'y(t)' 'z(t)' 'r(t)' nseg [ -e expr ][ -f file ]

DESCRIPTION

       Genworm	produces  a  RADIANCE  scene description of a worm defined by the parametric equations x(t), y(t), z(t), and r(t) (the radius).  T
       will vary from 0 to 1 in steps of 1/nseg.  The surface will be composed of nseg cones or cylinders and nseg+1 spheres.  The expressions are
       of the same type used in RADIANCE function files.  Auxiliary expressions and/or files may be specified in any number of -e and -f options.

EXAMPLE

       To generate a banana:

	 genworm yellow banana '0' '5*sin(t)' '5*cos(t)' '.4-(.5-t)*(.5-t)' 20

AUTHOR

       Greg Ward

BUGS

       Since  the worm is constructed of intersecting surfaces, only opaque materials should be used with this object.	Also, a worm cannot double
       back inside itself without making a mess.

SEE ALSO

       genrbox(1), genrev(1), gensurf(1), icalc(1), rpict(1), rvu(1), xform(1)

RADIANCE
							     11/15/93								GENWORM(1)