Email-Worm.Rontokbro
Email-Worm.Rontokbro is a mass-mailing internet worm. Email-Worm.Rontokbro spreads via spammed e-mails with infected attachments. Once a victim opens the attachment, Email-Worm.Rontokbro will be installed and executed. When inside a system, Email-Worm.Rontokbro will scan for e-mails addresses and then send copies of itself to the found addresses using the victims e-mail account. Email-Worm.Rontokbro may also disable certain security software and block a victim's access to the Registry Editor or Command Prompt.
Table of Contents
Aliases
6 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win-Trojan/Xema.variant |
| - | Trojan.Click |
| - | Trojan:Win32/Malagent |
| - | Mal/SillyFDC-F |
| - | Generic VB.ef |
| - | Trojan.Win32.VB.airv |
File System Details
Email-Worm.Rontokbro may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %UserProfile%\%UserName%1\winlogon.exe |
Registry Details
Email-Worm.Rontokbro may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system]
