W32/Braban.O.IM is a worm that infects Windows systems.

Upon execution, it copies as isapnp.exe, taskmgr.exe, AZIP32.DLL, privada.exe, sndrec.exe, OSSMTP.dll, atapi16.sys, moucla.sys in Windows System folder.

The worm modifies registry at the following location to load itself during each startup:


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce

The worm downloads jpg file in the affected system, this file is not a infected file.

More information can be found at this Proland Software page.