WORM_ONLINEG.DSO

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2008-02-09 05:45	Description was changed. New: "This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. This worm creates registry entry to enable its automatic execution at every system startup. It also modifies registry entries to hide files with both System and Read-only attributes. This worm drops copies of itself in all physical and removable drives. It also drops an AUTORUN.INF file to automatically execute its dropped copies when the said drives are accessed." Old: "This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. This worm creates registry entry to enable its automatic execution at every system startup. It also modifies registry entries to hide files with both System and Read-only attributes. It deletes itself after execution."
2008-02-07 11:41	Description was changed. New: "This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. This worm creates registry entry to enable its automatic execution at every system startup. It also modifies registry entries to hide files with both System and Read-only attributes. It deletes itself after execution." Old: "This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. Upon execution, this worm drops several component files, which Trend Micro detects as WORM_AUTORUN.ZU, TSPY_ONLINEG.NNW, WORM_AUTORUN.ZQ, WORM_NSANTI.FY."
2008-02-05 06:41	Description was changed. New: "This worm may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. Upon execution, this worm drops several component files, which Trend Micro detects as WORM_AUTORUN.ZU, TSPY_ONLINEG.NNW, WORM_AUTORUN.ZQ, WORM_NSANTI.FY." Old: "N/A"