Its main aim is to spread via email messages and affect as many computers as possible. It has rootkit functionalities in order to make its detection more difficult.

Windows 2003/XP/2000/NT/ME/98/95

Nuwar.GDM is worm whose main aim is to spread via email messages and affect as many computers as possible. The messages in which it spreads contain an attached file.

Additionally, it has rootkit functionalities in order to go unnoticed and to make its detection more difficult.

Nuwar.GDM is easy to recognize, as it spreads via email messages which contain an attached file called SETUP.ZIP, which once run downloads the worm to the system.

The messages in which it can reach the computer are like the following:

• In one of them, users are notified that they cannot access certain account temporarily because it may have been used by someone else. In the attached file, they can find more information about this:
  
  
• In the other, they are notified that the configuration of certain email account has been modified and that they can check it in the attached file:
  
  

If users run the file SETUP.ZIP, they will be redirected to a similar website to Google groups' and which contain a link from which the worm is downloaded: