WORM_RASTY.A

This worm may be downloaded from remote sites by other malware. It may arrive bundled with malware packages as a malware component. It may also be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, this worm drops copies of itself. It then creates and modifes several registry keys/entries.

This worm propagates by dropping a copy of itself in all removable drives. It hides any folder found in the said drives and then creates copies of itself using the drive's original folder names as its file name. It uses the default folder icon to trick the user into believing that it is a non-malicious file.

Related Items