Threat Search: 

ThreatExpert's Statistics for Worm:Win32/Brontok@mm [Microsoft]:

Worm:Win32/Brontok@mm [Microsoft] is also known as:
Threat AliasNumber of Incidents
W32/Rontokbro.gen@MM [McAfee]16
W32.Rontokbro@mm [Symantec]15
Email-Worm.Win32.Brontok.q [Kaspersky Lab]10
WORM_RONTKBR.GEN [Trend Micro]6
WORM_BRONTOK.BA [Trend Micro]5
Email-Worm.Win32.Brontok.A [Ikarus]4
Email-Worm.Win32.Brontok [Ikarus]3
W32/Brontok-Gen, Mal/EncPk-BA [Sophos]3
Email-Worm.Win32.Brontok.a [Kaspersky Lab]2
Email-Worm.Win32.Brontok.N [Ikarus]2
Email-Worm.Win32.Brontok.n [Kaspersky Lab]2
Mal/Generic-A [Sophos]2
W32/Brontok-Gen, Mal/Heuri-D, Mal/EncPk-BA [Sophos]2
W32/Brontok-Gen, Mal/Packer, Mal/EncPk-BA [Sophos]2
Email-Worm.Brontok!sd6 [PC Tools]1
Email-Worm.Win32.Brontok.o [Ikarus]1
I-Worm.Brontok.BQ [PC Tools]1
I-Worm.Brontok.EB [PC Tools]1
I-Worm.Brontok.ER [PC Tools]1
W32.Rontokbro.B@mm [Symantec]1
W32.Rontokbro.U@mm [Symantec]1
W32/Brontok-AQ [Sophos]1
W32/Brontok-B [Sophos]1
W32/Brontok-Gen, Mal/Behav-024 [Sophos]1
W32/Brontok-Gen, Mal/EncPk-BA, Mal/Packer [Sophos]1
W32/Brontok-Gen, Mal/Packer, Mal/Behav-024 [Sophos]1
W32/Brontok-S [Sophos]1
W32/Brontok-X [Sophos]1
W32/Rontokbro.b@MM [McAfee]1
Win32/Brontok.worm.159740 [AhnLab]1
Win32/Brontok.worm.42667 [AhnLab]1
Win32/Brontok.worm.43520.B [AhnLab]1
Win32/Brontok.worm.45512.B [AhnLab]1
Win32/Rontokbro.worm.81920 [AhnLab]1
Win-Trojan/Xema.variant [AhnLab]1
Worm.Brontok.BJ [PC Tools]1
Worm.Brontok.BY [PC Tools]1
WORM_RONTOKBRO.B [Trend Micro]1

Worm:Win32/Brontok@mm [Microsoft] is known to be created as:
%AppData%\br6657on.exe
%AppData%\csrss.exe
%AppData%\inetinfo.exe
%AppData%\jalak-931738815-bali.com
%AppData%\lsass.exe
%AppData%\services.exe
%AppData%\smss.exe
%AppData%\svchost.exe
%AppData%\winlogon.exe
%System%\cmd-brontok.exe
%System%\n7533\b8682.exe
%System%\n7533\csrss.exe
%System%\n7533\lsass.exe
%System%\n7533\services.exe
%System%\n7533\winlogon.exe
%Templates%\11496-nendangbro.com
%Templates%\a.kotnorb.com
%Templates%\brengkolang.com
%Windir%\eksplorasi.exe
%Windir%\inf\norbtok.exe
%Windir%\kesenjangansosial.exe
%Windir%\shellnew\rakyatkelaparan.exe
%Windir%\shellnew\sempalong.exe
%Windir%\us18336\ib8682.exe
Notes:
  • %AppData% is a variable that refers to the file system directory that serves as a common repository for application-specific data. A typical path is C:\Documents and Settings\[UserName]\Application Data.
  • %System% is a variable that refers to the System folder. By default, this is C:\Windows\System (Windows 95/98/Me), C:\Winnt\System32 (Windows NT/2000), or C:\Windows\System32 (Windows XP).
  • %Templates% is a variable that refers to the file system directory that serves as a common repository for document templates. A typical path is C:\Documents and Settings\[UserName]\Templates.
  • %Windir% is a variable that refers to the Windows installation folder. By default, this is C:\Windows or C:\Winnt.