WORM_ONLINEG.LYX

This worm may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself.

It creates registry entries to enable its automatic execution at every system startup.

This worm drops a copy of itself in all available physical drives. It drops an AUTORUN.INF file to automatically execute dropped copies when the drives are accessed.

It drops a file detected by Trend Micro as TSPY_LEGMIR.DAD. It then executes the dropped file(s). As a result, malicious routines of the dropped spywareare exhibited on the affected system.

Related Items