Worm_agent.ad


 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Worm_agent.ad
# 1  
Old 05-01-2008
Worm_agent.ad

This worm may be dropped by other malware.
It may be downloaded unknowingly by a user when visiting malicious Web site(s).
This worm registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry key(s)/entry(ies).
It also creates other registry key(s)/entry(ies) as part of its installation routine.
This worm drops copies of itself in all physical and removable drives.
It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

It drops component file(s), including TROJ_AGENT.OTJ. A certain dropped file replaces the legitimate file of the same name in the Windows system folder.
It connects to a Web site to download a text file. The downloaded text file contains a list of malware download sites. As a result, the routines of the downloaded files may be exhibited on the system.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
GENWORM(1)						      General Commands Manual							GENWORM(1)

NAME
genworm - generate a RADIANCE description of a functional worm SYNOPSIS
genworm mat name 'x(t)' 'y(t)' 'z(t)' 'r(t)' nseg [ -e expr ][ -f file ] DESCRIPTION
Genworm produces a RADIANCE scene description of a worm defined by the parametric equations x(t), y(t), z(t), and r(t) (the radius). T will vary from 0 to 1 in steps of 1/nseg. The surface will be composed of nseg cones or cylinders and nseg+1 spheres. The expressions are of the same type used in RADIANCE function files. Auxiliary expressions and/or files may be specified in any number of -e and -f options. EXAMPLE
To generate a banana: genworm yellow banana '0' '5*sin(t)' '5*cos(t)' '.4-(.5-t)*(.5-t)' 20 AUTHOR
Greg Ward BUGS
Since the worm is constructed of intersecting surfaces, only opaque materials should be used with this object. Also, a worm cannot double back inside itself without making a mess. SEE ALSO
genrbox(1), genrev(1), gensurf(1), icalc(1), rpict(1), rvu(1), xform(1) RADIANCE
11/15/93 GENWORM(1)