WORM_DELF.NAT

This worm arrives as a file dropped by other malware. It can also be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself.

It disables Automatic Windows Update to prevent the affected user from receiving automatic Windows updates. It also disables Task Manager to avoid termination from the affected system's memory.

It modifies registry entries to hide files with both System and Read-only attributes.

It drops copies of itself in all physical drives and removable drives. It also drops a certain file to automatically execute its dropped copies when the said drives are accessed.

Related Items