Virus Encyclopedia
Welcome to the Virus Encyclopedia of Panda Security.
Nuwar.GDM | |
Threat Level DamageDistribution |
 |
| Common name: | Nuwar.GDM |
| Technical name: | W32/Nuwar.GDM.worm |
| Threat level: | Low |
| Type: | Worm |
| Effects: | Its main aim is to spread via email messages and affect as many computers as possible. It has rootkit functionalities in order to make its detection more difficult. |
| Affected platforms:
|
Windows 2003/XP/2000/NT/ME/98/95 |
| First detected on: | May 6, 2010 |
| Detection updated on: | May 25, 2010 |
| Statistics | No |
Brief Description | |
Nuwar.GDM is worm whose main aim is to spread via email messages and affect as many computers as possible. The messages in which it spreads contain an attached file. Additionally, it has rootkit functionalities in order to go unnoticed and to make its detection more difficult. |
Visible Symptoms | |
Nuwar.GDM is easy to recognize, as it spreads via email messages which contain an attached file called SETUP.ZIP, which once run downloads the worm to the system. The messages in which it can reach the computer are like the following: - In one of them, users are notified that they cannot access certain account temporarily because it may have been used by someone else. In the attached file, they can find more information about this:
 - In the other, they are notified that the configuration of certain email account has been modified and that they can check it in the attached file:
If users run the file SETUP.ZIP, they will be redirected to a similar website to Google groups' and which contain a link from which the worm is downloaded:
 > |