Threat Search: 

ThreatExpert's Statistics for Email-Worm.Brontok.Q [PC Tools]:

Email-Worm.Brontok.Q [PC Tools] is also known as:
Threat AliasNumber of Incidents
Email-Worm.Win32.Brontok.q [Kaspersky Lab]3
W32.Rontokbro@mm [Symantec]3
W32/Rontokbro.gen@MM [McAfee]3
Email-Worm.Win32.Brontok [Ikarus]2
Mal/EncPk-BA [Sophos]2
Win32/Brontok.worm.42089 [AhnLab]2
Worm:Win32/Tofam!rts [Microsoft]2
WORM_RONTKBR.GEN [Trend Micro]1

Email-Worm.Brontok.Q [PC Tools] is known to be created as:
%AppData%\csrss.exe
%AppData%\inetinfo.exe
%AppData%\lsass.exe
%AppData%\services.exe
%AppData%\smss.exe
%AppData%\winlogon.exe
%Templates%\brengkolang.com
%Windir%\berasjatah.exe
%Windir%\shellnew\sempalong.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %Templates% is a variable that refers to the file system directory that serves as a common repository for document templates. A typical path is C:\Documents and Settings\[UserName]\Templates.
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.