Login or Register to Ask a Question and Join Our Community


Malware Advisories (RSS)

Worm_nuwar.bc

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Malware Advisories (RSS) Worm_nuwar.bc
# 1  
Old 06-04-2008
Worm_nuwar.bc
This worm arrives as attachment to email messages spammed by another malware or a malicious user.It may be downloaded from certain remote sites.
It drops copies of itself.It drops files/components.
It creates registry entries to enable its automatic execution at every system startup.
It creates registry key(s)/entry(ies).
It uses its own Simple Mail Transfer Protocol (SMTP) engine to send email messages that contain a link pointing to a remote copy of itself. Below is a sample of the email message it sends out:
Image
It opens ports where it listens for remote commands. This routine effectively compromises the affected system.

It invokes a certain legitimate file to bypass the Windows Firewall. It also attempts to connect to a known malicious Web site.

More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

mojomojo::controller::attachment

MojoMojo::Controller::Attachment(3pm)			User Contributed Perl Documentation		     MojoMojo::Controller::Attachment(3pm)

NAME

       MojoMojo::Controller::Attachment - Attachment controller

DESCRIPTION

       MojoMojo supports attaching files to nodes. This controller handles administration and serving of these assets.

ACTIONS

   auth
       Return whether the current user has attachment manipulation rights (upload/delete).

   unauthorized
       Private action to return a 403 with an explanatory template.

   default
       Private action to return a 404 not found page.

   attachments
       Main attachment screen.	Handles uploading of new attachments.

   list
       Display the list of attachments if the user has view permissions.

       template: attachments/list.tt

   plain_upload
       Upload feature that uses the traditional upload technique.

   check_file
       Check if the file(s) uploaded could be added to the Attachment table.

   flash_upload
       Upload feature that uses flash

   attachment
       Find and stash an attachment.

   defaultaction
       Set the default action for an attachment which is forwarding to a view.

   view
       Render the attachment in the browser ("Content-Disposition: inline"), with caching for 1 day.

   download
       Forwards to "view" then forces the attachment to be downloaded ("Content-Disposition: attachment") and disables caching.

   thumb
       Thumb action for attachments. Makes 100x100px thumbnails.

   inline
       Show 800x600 inline versions of photo attachments.

   delete
       Delete the attachment from this node. Will leave the original file on the file system but delete its thumbnail and inline versions.

AUTHOR

       Marcus Ramberg "marcus@nordaaker.com"

LICENSE

       This library is free software. You can redistribute it and/or modify it under the same terms as Perl itself.

perl v5.14.2							    2010-05-23				     MojoMojo::Controller::Attachment(3pm)