WORM_NUWAR.ACE

This worm arrives as attachment to email messages spammed by another malware or a malicious user. It may be dropped by other malware. It may be installed manually by a user. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It creates folders. It drops copies of itself. It drops files/components.

It creates registry entries to enable its automatic execution at every system startup. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.

It propagates by sending email messages containing a link, which redirects users to a malicious Web site where a copy of itself can be downloaded.

Related Items