W32/Detnat is a virus. The virus will infect Windows systems and spreads through network shares.

Once activated this virus searches for the shared folders in an infected computer and then infects all the .exe files found in the folder.

Upon execution of the infected .exe file, it copies the infected file to Windows Temp folder as cooler[random number].exe, it then disinfects the file and copies itself as the original file name in the current folder from which the virus was executed.

It tries to connect to the following websites and downloads and excutes a file.

http://www.[blocked].com/bbs/img/bbs.wos
http://www.[blocked].com/images/1.wos

This worm first appeared on May 03, 2006.

 Other names of W32/Detnat Virus:

This Worm is also known as PE_DETNAT.A, Win32/Detnat.A.