9/7: Blueworm-D a Memory-Resident Worm
September 7, 2004

Worm_Blueworm.D is a memory-resident worm that propagates through network shares and Internet Relay Chat (IRC). It drops several copies of itself in the Windows and the Windows system folders. Some of the dropped files are ZIP-compressed, in which case it uses the WinZip application to extract the dropped files.

It also drops a certain valid .DLL file, which it uses in sending email messages.

View the details of the email message it sends out and other information at Trend Micro page.