WORM_LOVGATE.BX

This worm may be downloaded unknowingly by a user when visiting malicious Web sites.

It creates registry entries to enable its automatic execution at every system startup.

It opens certain ports to access network shares. It then drops copies of itself in the said network shares.

It also takes advantage of software vulnerabilities in order to propagate across network shares.

It downloads files on the affected system.

It opens ports where it listens for remote commands. It joins IRC channels.

It modifies the system's HOSTS files to prevent users from accessing certain Web sites.

Related Items