W32/Combra.O is a worm. The worm will infect Windows systems and spreads through email.

This worm arrives as three different mails. The first infected mail will be in the form of a greeting card, second infected mail will be in the form of a postal card and the third mail contains the websongs of the Radio land.

Each mail is written in Portuguese language and contains a link, on clicking the link a copy of worm is downloaded on to the system.

Upon execution, the worm tries to connect to the following website;

http://[blocked]/%20/upd/crss.jpg

To propagate itself, the worm scans Windows Address Book and collects all the available email addresses from the infected system.

The worm mails itself to these addresses using its own SMTP engine.

This worm first appeared on December 18, 2005.

 Other names of W32/Combra.O Worm:

This Worm is also known as WORM_COMBRA.O.