TheEnforcer7

Medical-Records-Security

Wormbit

Wormbit injecting code enabling remote management in background, and setting attributes to "hidden", on files created and saved by admin account. establishes shares to phantom users, renames file extension & ownership of objects to "trusted installer" overiding Administrator access especially to system folders. Has remapped keyboard, changed ip address of gateway and opens 11 ports for explotation, as svchost process enables redirects, Java scripting (malicious). One nasty worm, suspected to originate from Windows 7 Pro installation from media.

TheEnforcer7/Wormbit

Wormbit injecting code enabling remote management in background, and setting attributes to "hidden", on files created and saved by admin account. establishes shares to phantom users, renames file extension & ownership of objects to "trusted installer" overiding Administrator access especially to system folders. Has remapped keyboard, changed ip address of gateway and opens 11 ports for explotation, as svchost process enables redirects, Java scripting (malicious). One nasty worm, suspected to originate from Windows 7 Pro installation from media.

TheEnforcer7/Medical-Records-Security