Coronex is a worm that spreads rapidly via e-mail and through the P2P (peer-to-peer) file-sharing applications.
Coronex is easy to recognize, as the message carrying the worm includes an attached file with one of the following names: CORONA.EXE, CV.EXE, DEATHS.EXE, HONGKONG.EXE, SARS.EXE, SARS2.EXE and VIRUS.EXE. In general the content of these e-mail messages refer to the chronic pneumonia outbreak that has claimed many victims around the globe.
When infection has been carried out, the file that is originally transmitted via e-mail is copied to the affected computer under a name that is related to a famous computer game, such as: Command & Conquer, Doom, The Lord Of The Rings, The Sims, Unreal, etc.
For details of the e-mail messages used by Coronex to spread, consult the section Means of transmission.
For a list of the computer games it uses as bait, consult the section Means of infection.