WORM_MARIOFEV.D

This worm may be dropped by other malware. It arrives as a .DLL file that exports functions used by other malware.

It then creates registry keys/entries. This worm gathers target email addresses from cached email messages, address books, and mail boxes. It uses gathered or generated email addresses to spoof the From field of the email message it sends out.

This worm connects to URLs to send and receive information.

Related Items