[1nT0x!c@t3d]

Very nasty worm fresh off of a server

known as Autorun.worm.aaeh!heur
and
WORM_VOBFUS.SMMC

there are 8 copies of itself that i was able to grab. there were many more but they are really just the same thing

i had to omit the business name for security reasons, but i did find it really interesting that the file in question actually grabbed the business name and used it to name an infected file. probably copied from a folder but still interesting non the less

Virus Total
11/45
https://www.virustotal.com/en/file/1a3f7...363373556/


download link:

http://www.filehosting.org/file/details/...SMMC%20.7z

file is in a 7z format with NO PW.
proceed at your own risk.

[1nT0x!c@t3d]

Very nasty worm fresh off of a server

known as Autorun.worm.aaeh!heur
and
WORM_VOBFUS.SMMC

there are 8 copies of itself that i was able to grab. there were many more but they are really just the same thing

i had to omit the business name for security reasons, but i did find it really interesting that the file in question actually grabbed the business name and used it to name an infected file. probably copied from a folder but still interesting non the less

Virus Total
11/45
https://www.virustotal.com/en/file/1a3f7...363373556/


download link:

http://www.filehosting.org/file/details/...SMMC%20.7z

file is in a 7z format with NO PW.
proceed at your own risk.

this is the worst worm i have seen. it will infect all mapped drives, all local drives, all partitions, all usb storage devices attached while the file(s) are executed, and just about anything and everything on the network.

for testing purposes i would recommend staying off of any and all networks, make sure any and all sharing is off and all mapped drives are off, and possibly using something like deep freeze or shadow defender.