Date Discovered: 3/17/2004
Date Added: 3/17/2004
Length: 105,586 Bytes
A repacked sample of this worm has been received by AVERT - exact detection of this will be in in the 4339 DATs. NB: As with previous variants this variant also drops a backdoor component which will be detected as BackDoor-AQJ with the 4339 DATS.
This variant of W32/Lovgate bears similarities to previous W32/Lovgate variants:
it copies itself over network shares
it drops a backdoor component (detected as BackDoor-AQJ with 439 DATS and above)
it creates a share on the victim machine
it mails itself, replying to unread messages in the Microsoft Outlook and Outlook Express inboxes
Pint-size luxury and funky style
Shopping for a new car this weekend? See how the BMW X2 stacks up against the Volvo XC40 in our side-by-side comparison.