W32.Degnax@mm Worm
Discovered: January 20, 2008

The worm attempts to download files onto the system and save them as the following:
* %System%\begin.dll
* %System%\SystemPlug.dll


The worm attempts to spread via mapped and network drives. It creates the following files:
* %DriveLetter%\search.exe
* %DriveLetter%\autorun.inf
* %DriveLetter%\ShowSarah.xls
* %DriveLetter%\thumb.log
* %DriveLetter%\win.txt


The worm then gathers contact details from the affected computer and sends a mail to those contacts,

http://www.symantec.com/business/security_...-012012-5840-99