W32.Wotron.Worm

W32.Wotron.Worm is a detection for worms that were created using a worm creation kit. These files are received as email messages. The characteristics of the worm are determined when then worm is constructed and, therefore, will vary.

All worms that are created using the kit copy themselves to \%System%\Wininet.exe. The optional password-stealing component creates the \%System%\Sysd.dll and \%System%\Exelib.dll files.

NOTE: %System% is a variable. The worm locates the \Windows\System folder (by default this is C:\Windows\System or C:\Winnt\System32) and copies itself to that location.

If the computer was infected with this worm, you should reset all passwords because the worm's creator could have configured the worm to send them to the creator of the worm.