Brontok is a computer virus that infects machines running Microsoft Windows. Available in many variants, Brontok originated in Indonesia.
Brontok refers to elang brontok, a bird species native to South and Southeast Asia. The virus first arrives inside an email that reads Indonesian, with an attachment named "kangen.exe".
When Brontok is first run, it copies itself to the user's application data directory. Then it starts infecting Windows at the next boot by creating a new registry entry. To prevent the changes to be compromised, the virus also disables the Windows Registry Editor and modifies Windows Explorer settings. Furthermore, the virus turns off Windows firewall making the machine more vulnerable to more damage, creates .exe files in many places, pops up a web browser, and prevent the machine from downloading files. The worm also carried out a ping flood attack.
The most common symptom is the computer occasionally reboots.
