









 |
W32/Brontok.A Worm
| Name |
W32/Brontok.A Worm |
| Aliases |
Email-Worm.Win32.Brontok.a, I-Worm.Brontok.WI |
| Updated on |
July 20, 2010 |
Virus Information - W32/Brontok.A Worm:
W32/Brontok.A is a worm. The worm will infect Windows systems.
Upon execution, the worm drops following files in Documents and Settings\Default User\Local Settings\Application Data folder:
smss.exe
csrss.exe
The worm also drops esoJray.exe in Windows\inf folder.
The worm modifies registry at the following locations:
HKEY_USERES\S-1-5-21-XXXXXXXXX-XXXXXXXXXX-XXXXXXXXXX-XXXX\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run

|