WORM_ASPXOR.AB

Malware type: Worm
Aliases: No Alias Found
In the wild: Yes
Destructive: No
Language: English
Platform: Windows 98, ME, NT, 2000, XP, Server 2003
Overall risk rating:
attach_file_singleprofile('WORM_ASPXOR.AB',0,0);
Reported infections:
Low
attach_file_reportedInfection('WORM_ASPXOR.AB',0,0);
Damage potential:
Low
Distribution potential:
High
Description:
To get a one-glance comprehensive view of the behavior of this malware, refer to the Threat Diagram shown below.





Malware Overview
This worm may be downloaded from remote sites by other malware. It may be dropped by other malware, specifically TROJ_DROPPER.JIZ. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It creates registry keys/entries as part of its installation routine.
It drops component files.
It compromises Web sites to redirect users to URLs where a copy of itself may be downloaded.