Malware.Drowor
Malware.Drowor is a network-aware worm that attempts to replicate across the existing network. Malware.Drowor requests other malicious files from the Internet. Malware.Drowor also has the ability to send out email messages with a built-in SMTP client engine which can send private emails directly to a recipient mail server for malicious purposes. Malware.Drowor contains definite characteristics of an identified security risk and should be removed immediately.
Table of Contents
Aliases
4 security vendors flagged this file as malicious.
| Anti-Virus Software | Detection |
|---|---|
| - | Win32/Sohanad.worm.17920 |
| - | W32/Drowor-A |
| - | WORM_VB.FVY |
| - | IM-Worm.Win32.Sohanad.dz |
File System Details
Malware.Drowor may create the following file(s):
| # | File Name |
Detections
Detections: The number of confirmed and suspected cases of a particular threat detected on
infected computers as reported by SpyHunter.
|
|---|---|---|
| 1. | %System%\0617152D |
Registry Details
Malware.Drowor may create the following registry entry or registry entries:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
