WORM_AGENT.AHAX

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may arrive via network shares. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this worm drops a copy of itself. It then creates a registry entry to enable its automatic execution at every system startup.

This worm spreads by searching the network for all available network shares and mapped drives. Once found, it then drops a copy of itself in the said locations.

Related Items