We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Worm:Win32/Stration.DH@mm!CME416
Detected by Microsoft Defender Antivirus
Aliases: Win32/Stration!generic (CA) Email-Worm.Win32.Warezov.ez (Kaspersky) W32/Stration.ATT (Norman) W32/Strati-Gen (Sophos) W32.Stration.DL@mm (Symantec) WORM_STRAT.DR (Trend Micro)
Summary
Win32/Stration.DH@mm!CME-416 is a mass-mailing email worm that sends itself to addresses obtained from a wide range of file types found on the infected system. The e-mail message composed by the worm may masquerade as a failure message or as a scanning tool. Win32/Stration.DH@mm!CME-416 also acts as a Trojan downloader, attempting to download a file from a remote website. The downloaded file may be another variant of the Win32/Stration family.
Manual removal is not recommended for this threat. To detect and remove this threat and other malicious software that may have been installed, run a full-system scan with an up-to-date antivirus product such as Microsoft Security Essentials, or the Microsoft Safety Scanner. For more information about using antivirus software, see http://www.microsoft.com/security/antivirus/av.aspx.
Follow us
