Mountoni is an email worm that propagates through Microsoft Outlook. After being executed, the worm will add itself to the startup directory, making it launch upon bootup, with the name "Winboot.js". It will additionally add itself to the Windows directory under the name "Jokes.txt.js", with the ".js" being hidden by default.
Once executed, the worm will propagate, through email, using addresses found in Outlook's address book. The email will appear as shown below:
- FW: Jokes!
- These are some good party jokes
Here, jokes.txt.js, is the worm. Beyond that, the worm does very little.
- Kaspersky Threats, Email-Worm.JS.Mountoni