Aliases: W32.Nuf.A, Worm.Win32.Nuf
Variants: N/A

Classification: Malware
Category: Computer Worm

Status: Dormant
Spreading: Fast
Geographical info: Europe, North and South America, and some parts of Asia and Australia
Removal: Easy
Platform: W32
Discovered: 07 Aug 2003
Damage: Low

Characteristics: W32.Nuffy.A is a worm that spreads via open network shares. Reports say that this worm holds no known damaging payload. It can attack Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT and Windows XP Operating Systems. Other antivirus definitions dated before August 8, 2003 may detect this threat as W32.Nuf.A.

More details about W32.Nuffy.A

This worm has the ability to connect to all the machines on the Local Area Network, using combinations from the following usernames: admin, system, guest and guestguest with passwords such as 12345 and 1111. If it successfully connects, it will find the shared folders with write access. If they are found, the worm will copy itself to the remote host as Fun.exe. As it multiplies, it takes up space and this space become unusable when the memory space is lessened.

The W32.Nuffy.A application can possibly be used to download unsolicited and unwanted files to the infected computer. It can download simple irritating adware to the most destructive worms. These malware can be installed in the infected computer and distributed to other computers through emails, chats, and peer-to-peer sharing sites. It can also stop and start programs in the affected system. Usually, this kind of malware targets security applications like anti-malware programs and firewalls. But the W32.Nuffy.A program can reportedly stop the Operating System as well.