We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Worm:Win32/Nuwar.JK
Detected by Microsoft Defender Antivirus
Aliases: Email-Worm.Win32.Zhelatin.cq (F-secure) Email-Worm.Win32.Zhelatin.cq (Kaspersky) W32/Nuwar@MM (McAfee) W32/Dref-AF (Sophos) W32/Mixor.AR@mm (Symantec) WORM_NUWAR.AOK (Trend Micro)
Summary
Worm:Win32/Nuwar.JK is a mass-mailing email worm that sends a Trojan dropper via email. When the Trojan attachment is opened, it installs a distributed peer-to-peer (P2P) downloader Trojan which typically downloads a copy of the Win32/Nuwar worm component.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Follow us
