Threat Database Worms Email-Worm.Rontokbro

Email-Worm.Rontokbro

Email-Worm.Rontokbro is a mass-mailing internet worm. Email-Worm.Rontokbro spreads via spammed e-mails with infected attachments. Once a victim opens the attachment, Email-Worm.Rontokbro will be installed and executed. When inside a system, Email-Worm.Rontokbro will scan for e-mails addresses and then send copies of itself to the found addresses using the victims e-mail account. Email-Worm.Rontokbro may also disable certain security software and block a victim's access to the Registry Editor or Command Prompt.

Aliases

6 security vendors flagged this file as malicious.

Anti-Virus Software Detection
- Win-Trojan/Xema.variant
- Trojan.Click
- Trojan:Win32/Malagent
- Mal/SillyFDC-F
- Generic VB.ef
- Trojan.Win32.VB.airv

File System Details

Email-Worm.Rontokbro may create the following file(s):
# File Name Detections
1. %UserProfile%\%UserName%1\winlogon.exe

Registry Details

Email-Worm.Rontokbro may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]

Related Posts

Trending

Most Viewed

Loading...