Dumaru

Dumaru is a file infector and a mass-mailing worm, which tries to cover itself as a security patch coming from Microsoft. Once it is executed, Dumaru will drop an IRC-controlled backdoor component to the infected system. In addition, Dumaru searches for email addresses on all drives recursively in files and then sends its copies to all found addresses. Dumaru uses its own SMTP engine to send emails with infected attachments.