Threat description




This malware normally arrives downloaded by other trojan packages.

Depending on the supplied parameter, this malware can send numerous Spam messages.


Automatic action

Depending on the settings of your F-Secure security product, it will either automatically delete, quarantine or rename the suspect file, or ask you for a desired action.

More scanning & removal options

More information on the scanning and removal options available in your F-Secure product can be found in the Help Center.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

This malware installs a Spam Bot utilized for sending numerous spam messages.

On execution, it will immediately make queries on several exchange servers. The following settings can be configured to modify the malware's behavior:

  • Address to use
  • Interval for sending SMTP messages
  • Maximum connection to be made
  • Number of tries to connect to certain mail server before quiting
  • Port(s) to use
  • TimeOut value if no reply has been received from the server

Submit a Sample

Suspect a file or URL was wrongly detected? Send it to our Labs for further analysis

Submit a Sample

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

More Info