Anti-Virus White Papers
QAZ.worm
Overview
Qaz is a network worm that infects in the fashion of a companion virus and imparts backdoor remote access to the affected machine. This threat does not utilize email as a mechanism for spread. Qaz has been reported in the wild and is believed to have originated in China in mid-July. There are now 3 reported variants of the original threat.
When the virus program is launched it will search for a copy of notepad.exe and rename it to note.com. It will then copy itself to the computer as notepad.exe. Each time notepad.exe is executed, it will run the virus code and the original notepad(renamed to note.com) to avoid being noticed. It will also modify the following system registry key to execute itself every time the system is booted.
Click thru to alert text for further information.
| Publisher | SSS- Sensible Security Solutions Inc. | File Format | HTML |
|---|---|---|---|
| Date Published | August 2003 | Downloads | 2 |
| Format | White Papers | ||
| Topics | |||
-
Did you find this white paper useful?
White Paper RSS
Download
Register
