W32/Lovgate-Z is a variant of the W32/Lovgate family of worms that spread via email, network shares and filesharing networks.
W32/Lovgate-Z copies itself to the Windows system folder as the files WinHelp.exe, iexplore.exe, kernel66.dll and ravmond.exe and to the Windows folder as systra.exe.
The worm also drops the files msjdbc11.dll, mssign30.dll and odbc16.dll which are backdoor components of the worm and provide unauthorised remote access to the computer over a network.
Win32/Lovgate.V, I-Worm.LovGate.r, WORM_LOVGATE.N
W32/Lovgate-Z is a variant of W32/Lovgate-A.
W32/Lovgate-Z copies itself to the Windows system folder as WINEXE.EXE and changes the entry in the registry at HKCR\exefile\shell\open\command so that it
is run before an EXE file.
A detailed description of this worm will be posted here shortly.