Virus Encyclopedia
I-Worm/Mytob.WM
CME-540
It`s internet worm that spreads using known security hole on "not updated" systems.
Installation:
When the worm is launched it copies itself as wintbp.exe to Windows System Directory and registers itself as wintbp.exe in HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run key.
Spreading:
Worm spreads using Windows Plug and Play vulnerability described in MS05-039.
