WORM: Lovgate.P File Propagation Over SMB/CIFS
This signature detects the P variant of the LovGate worm copying itself from one network share to another. Because these attempts indicate that the source host is infected and attempting to spread to open network shares on other hosts, you should take the appropriate security actions immediately.
Extended Description
WORM_LOVGATE.P is a worm with backdoor capabilities.
Short Name
WORM:LOVGATE:P-NET-SHARE-SPREAD
Severity
Major
Recommended
False
Recommended Action
Drop
Category
WORM
Keywords
File Lovgate.P Over Propagation SMB/CIFS
Release Date
04/01/2004
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3324
False Positive
Unknown