Email-Worm.Win32.Brontok.q


Detection added: 16.09.2006 16:32:22

Behavior: Email Worm
Email worms spread via infected email messages. The worm may be in the form of an attachment or the email may contain a link to an infected website.
Worm will be activated when the user clicks on the attachment or will be activated when the user clicks on the link leading to the infected site.
Use one of the following methods to spread: Direct connection to SMTP servers using a SMTP API library coded into the worm; MS Outlook services; Windows MAPI functions.

Behavior: Worm
A worm that spreads via e-mail, usually in infected executable e-mail file attachments.


Platform: This malware is a Windows PE EXE file.
Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP, Windows Vista, Windows 7 (x86)



 Malware Library: Latest Threats
 Products: Nicta Anti-Virus Engine
 Products: Anti-Malware Digital Patrol
 Services: Anti-Virus Cloud Engine