|
|
Worm.MyWife Worm Information
| Name: |
Worm.MyWife |
| Category: |
Worm |
| Alias: |
- Alias: TrojanProxy.Win32.Mitglieder.c [F-secure], Trojan.Mitglieder [Norton] |
| Advice: |
Remove |
| Risk: |
Severe Risk
Severe threats typically are remotely exploitable vulnerabilities, which can lead to system compromise. Successful exploitation does not normally require any interaction and exploits are in the wild. There exists a high possibility of potential system damage or security flaw. Attacker has complete control over your computer or install new software on your machine. |
| Description:
|
Worm.MyWife is a mass-mailing worm spread by email.
Worm.MyWife has the following characteristics::
On execution, the worm opens the Windows Media Player. The player does not play any file
Drops various files as listed below
Changes registration name of WinZip if it is locally installed on the machine
Blocks various AV software from starting by deleting their registry keys
Changes the local telnet service to automatically start
Copies itself to systems that have open shares
|
| Signatures:
|
process: MSHEARTS.EXE: MD5 Hash: 2d720a08f80f2135372...
process: explorer.exe: MD5 Hash: 5ffc45578c0b9639d6d...
process: hwinfo.exe: MD5 Hash: 0499f55b744eed1f4b9.. |
| Type: |
Worm - A worm is program that propagates by attacking other computers and copying itself to them. Worms may replace files, but do not insert themselves into files (as viruses do). |
Top Worm Visited Pages:
Wukill.mstray - Alias: Win32/HLLW.Wukill - 294 visits
Rbot - Alias: Backdoor.Rbot.Gen - 276 visits
SDBot - Alias: Wootbot.gen, Wootbot, Donk, spybot, Agobot - 229 visits
Trojan.Downloader.winstall - 182 visits
Worm.Brit.e - Alias: VBS/Chick.e@M virus - 89 visits
Worm.P2P.SpyBot.gen - 56 visits
Gaobot - 44 visits
Win32/Darby.O - 42 visits
Worm.Trilissa.e - 42 visits
JS.Lame - Alias: HTML.Lame - 40 visits
Random Worm Pages:
Worm.Netres.a
Worm.Lenting.o - Alias: I-Worm.Lentin.o
Worm.MTX.c
Navidad.Atix - Alias: Wintask, Atix, GMedia2
Worm.VBS.Monica
VBS.Coldape.vbs
Worm.Mimail.j
Worm.Runonce.b
VBS.e-Gen
Mitglieder - Alias: TrojanProxy.Win32.Mitglieder.c [F-secure], Trojan.Mitglieder [Norton]
|
|
