TROJ_NUWAR.AT

ChangeLog:
Changes are listed in chronological order with the latest changes first.
2008-05-13 05:42	Name was changed. New: "TROJ_NUWAR.AT" Old: "TROJAN"
2008-05-13 05:42	Description was changed. New: "This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. It drops copies of itself. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It gives a malicious user administrative rights to load executable codes into kernel mode where device drivers are run. This routine also allows a malicious user to install malicious codes into a system without being subjected to normal Windows security restrictions. Hence, malicious files can be downloaded regardless of the security settings." Old: "N/A"
2008-05-12 05:42	Name was changed. New: "TROJAN" Old: "TROJ_NUWAR.AT"
2008-05-12 05:42	Description was changed. New: "N/A" Old: "This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. It drops copies of itself. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It gives a malicious user administrative rights to load executable codes into kernel mode where device drivers are run. This routine also allows a malicious user to install malicious codes into a system without being subjected to normal Windows security restrictions. Hence, malicious files can be downloaded regardless of the security settings."
2008-05-02 06:46	Name was changed. New: "TROJ_NUWAR.AT" Old: "TROJAN"
2008-05-02 06:46	Description was changed. New: "This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. It drops copies of itself. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It gives a malicious user administrative rights to load executable codes into kernel mode where device drivers are run. This routine also allows a malicious user to install malicious codes into a system without being subjected to normal Windows security restrictions. Hence, malicious files can be downloaded regardless of the security settings." Old: "N/A"
2008-05-02 06:32	Name was changed. New: "TROJAN" Old: "TROJ_NUWAR.AT"
2008-05-02 06:32	Description was changed. New: "N/A" Old: "This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. It drops copies of itself. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It gives a malicious user administrative rights to load executable codes into kernel mode where device drivers are run. This routine also allows a malicious user to install malicious codes into a system without being subjected to normal Windows security restrictions. Hence, malicious files can be downloaded regardless of the security settings."
2008-05-01 12:16	Description was changed. New: "This Trojan may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites. It drops copies of itself. It registers itself as a system service to ensure its automatic execution at every system startup. It does this by creating registry keys/entries. It gives a malicious user administrative rights to load executable codes into kernel mode where device drivers are run. This routine also allows a malicious user to install malicious codes into a system without being subjected to normal Windows security restrictions. Hence, malicious files can be downloaded regardless of the security settings." Old: "N/A"