Infopirate.org

This worm arrives as attachment to email messages spammed by another malware or a malicious user.It may be dropped by other malware.It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself. It creates registry entries to enable its automatic execution at every system startup.

It gathers target email addresses from files with certain file name extensions.It avoids sending email messages to addresses containing certain strings.

This Trojan arrives as attachment to email messages spammed by another malware or a malicious user.

It creates registry entries to enable its automatic execution at every system startup.It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.

It drops files.

This worm arrives as attachment to email messages spammed by another malware or a malicious user.It may be downloaded from remote sites by other malware.It may be dropped by other malware.

It drops copies of itself.It drops a file detected by Trend Micro as WORM_NUWAR.ACE.

It creates registry entries to enable its automatic execution at every system startup.

It creates registry key(s)/entry(ies).

It gathers target email addresses from files with certain file name extensions.It

This Trojan may be downloaded from remote sites by other malware.It may be dropped by other malware.It may be downloaded unknowingly by a user when visiting malicious Web sites.

It drops copies of itself.It drops files/components.It is injected into processes running in memory.

It creates registry entries to enable its automatic execution at every system startup.It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries.

This worm arrives as attachment to email messages spammed by another malware or by a malicious user.

It drops a copy of itself. It also drops a non-malicious file.

It creates a registry entry to enable its automatic execution at every system startup. It also modifies registry entries as part of its installation routine.

It drops a component file detected by Trend Micro as RTKT_NUWAR.AA.

It propagates by sending email messages with links that redirect browsers to Web sites that contain a downloadable copy of itself.