Threat Database Worms Malware.Drowor


Malware.Drowor is a network-aware worm that attempts to replicate across the existing network. Malware.Drowor requests other malicious files from the Internet. Malware.Drowor also has the ability to send out email messages with a built-in SMTP client engine which can send private emails directly to a recipient mail server for malicious purposes. Malware.Drowor contains definite characteristics of an identified security risk and should be removed immediately.


4 security vendors flagged this file as malicious.

Anti-Virus Software Detection
- Win32/Sohanad.worm.17920
- W32/Drowor-A

File System Details

Malware.Drowor may create the following file(s):
# File Name Detections
1. %System%\0617152D

Registry Details

Malware.Drowor may create the following registry entry or registry entries:


Most Viewed