WORM_DOWNAD.E WORM_DOWNAD.A WORM_DOWNAD.A was the first iteration of this threat. This worm exploited the Server Service Vulnerability in various Windows OS versions in order to propagate via network shares. A
applications. This worm also downloads a backdoor, detected by Trend Micro as BKDR_BIFROSE.SMU . It also deletes services that disable antivirus applications, rendering the affected system unprotected.
registry entries so they can execute every time an infected system boots up. These also connect to several sites to wait for commands from remote malicious users hence compromising the systems’ security. A
from visiting antivirus-related websites that contain specific strings. Arrival Details This Worm arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when