Worm_Nuwar.AR arrives as attachment to email messages spammed by another malware or a malicious user.

It drops files detected by Trend Micro as TROJ_PEACOMM.BK.

It propagates by sending email messages containing a link, which redirects users to a malicious Web site where a copy of itself can be downloaded.


Technical details can be found at this Trend Micro page.