W32.Noddaba


Aliases: N/A
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Active & Spreading
Spreading: Slow
Geographical info: Asia, North and South America, and some parts of Europe and Australia
Removal: Easy
Platform: W32
Discovered: 04 Mar 2008
Damage: Low

Characteristics: W32.Noddaba is a worm that spreads by self duplication through various removable storage devices. All platforms of Windows Operating System can be affected. Files being duplicated are “abaddon.exe" and “Carpeta.exe.” This virus will attempt to terminate the processes involving “Msconfig.exe,”Regedit.exe” and “taskmgr.exe.” Aside from duplicating, creating garbage as well as terminating applications, the virus will also modify files display settings and set some file to stay hidden.

More details about W32.Noddaba

These are “.avi,”.doc,”.docx,”.mdb,”.mp3,”.mpg,”.ppt,”.xls,” Bmp,”.Rar” and “.zip.” The worm then spreads by copying itself with the hidden and system attributes. This will fill your computer with malicious, damaging, and insignificant files. As it reproduces, it takes up space. The space becomes unusable when the memory space is lessened. Sometimes, it changes the boot sector and it could result to the inability of the computer to run.

Studies made claim that the W32.Noddaba application is usually installed into the system by searching and exploiting for deficiencies in the user’s security program. Most often, it is installed into the computer without the user even consenting to its download or installation. When the program is run, it drops a number of copies of the program on the infected computer. These dropped files of the W32.Noddaba program possess features that allows it to be hidden from the users background thus making its detection likely impossible. The program may also employ a rootkit functionality that allows it to hide the program including its registry entries.