Virus Encyclopedia

Welcome to the Virus Encyclopedia of Panda Security.

Brontok.A

 
Threat LevelHigh threat
DamageSevere
DistributionNot widespread

At a glance

Common name:Brontok.A
Technical name:W32/Brontok.A.worm
Threat level:Medium
Alias:Win32.Worm.Robknot.A,
Type:Worm
Effects:   It spreads and affects other computers.
Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:Oct. 10, 2005
Detection updated on:Aug. 25, 2009
StatisticsNo
Proactive protection:
Yes, using TruPrevent Technologies

Brief Description 

    

Brontok.A is a worm that spreads by copying itself, without infecting other files.

 

Brontok.A uses the following propagation or distribution methods:

  • Exploiting vulnerabilities with the intervention of the user: exploiting vulnerabilities in file formats or applications. To exploit them successfully it needs the intervention of the user: opening files, viewing malicious web pages, reading emails, etc.
  • Email: sending emails that include a copy of itself as an attachment. The computer is infected when the attachment is run.

 

Tech details

Effects

The main objective of Brontok.A is to spread and affect other computers.

 

Means of transmission 

Brontok.A does not spread automatically using its own means. It needs the attacking user's intervention in order to reach the affected computer. The means of transmission used include, among others, floppy disks, CD-ROMs, email messages with attached files, Internet downloads, FTP, IRC channels, peer-to-peer (P2P) file sharing networks, etc.

Further Details  

Brontok.A has the following additional characteristics:

  • It is written in the programming language Visual Basic.
  • It is 40085 bytes in size.
  • It is compressed with MEW,MEW_Bundle,PE-Modif.

Solution

See solution