Full
Name: |
Nugache |
| Type: |
Worm |
| Also Known As: |
W32/Nugache@MM(McAfee),win32.trojan.scr , W32.Nugache.A@mm (Symantec) |
| Danger Level: |
7 |
| Category Description: |
Virus-like program that spreads automatically to other computers by sending itself out by email or by any other means. A program that propagates itself by attacking other machines and copying itself to the affected machine.
Worms have self-replicating code that travels from machine to machine by various means. A worms first objective is merely propagation. Worms can be destructive depending on what payload they have been given. Worms may replace files, but do not insert themselves into files. |
| Comment: |
It opens a backdoor on TCP port 8.
It tries to connect to a predetermined IRC server, open a back door, and wait for commands from an attacker. The back door allows the attacker to do perform activites like
* Perform a denial of service attack
* Access an FTP server
* Run as Web server
* Logs keystrokes and saves them
Propogates IM and e-mail. e.g. Instant Messenger, AOL mail
Also propogates through Windows Messenger, network shares and instant messages. |
| |
|
| Properties: |
|
Back to the list of products removed by X-Cleaner
|
