Storm Worm detected
| storm-worm (40812) |  High Risk |
Description:
The Storm Worm is a mass-mailing email worm that sends a Trojan dropper via a malicouis email message. Once executed, the Trojan installs a rootkit and causes the infected system to become part of a botnet. The Storm Worm is also know as the following names:
- Small.dam or Trojan-Downloader.Win32.Small.dam (F-Secure)
- CME-711 (MITRE)
- W32/Nuwar@MM and Downloader-BAI (specific variant) (McAfee)
- Troj/Dorf and Mal/Dorf (Sophos)
- Trojan.DL.Tibs.Gen!Pac13[3]
- Trojan.Downloader-647
- Trojan.Peacomm
- TROJ_SMALL.EDW
- Win32/Nuwar
- Win32/Nuwar.N@MM!CME-711
- Trojan.Peed, Trojan.Tibs
Platforms Affected:
- Microsoft, Windows 2000
- Microsoft, Windows Vista
- Microsoft, Windows XP
Remedy:
Use an up-to-date antivirus program to determine if the target computer is host to the Storm worm. If the program detects a backdoor, follow its instructions to disinfect and repair the computer.
Consequences:
Informational
References:
- Common Malware Enumeration (CME) - CME List, CME-711 is a Trojan Downloader that is spread as an attachment to emails with news headlines as the subject lines which downloads additional security threats at http://cme.mitre.org/data/list.html.
- Windows Live OneCare Web site, Virus Encyclopedia: Worm:Win32/Nuwar.N@mm!CME-711 at http://onecare.live.com/standard/en-us/virusenc/VirusEncInfo.htm?VirusID=8470957.
Reported:
Not available
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net