WORM_NUWAR.YH

To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.



Malware Overview

This worm may be downloaded from remote site(s) by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web site(s).

It drops copy(ies) of itself and file(s)/component(s).

It creates and modifies registry entry(ies) to enable its automatic execution at every system startup. It also creates registry key(s)/entry(ies) as part of its installation routine.

It disables console tracing in a command prompt window on Routing and Remote Access Service by creating registry key(s)/entry(ies).

It creates a registry entry to disable Windows Firewall Settings.

Related Items