Worm of the Ramnit malware family. It is distributed by spam email containing links to infected web resources. When active, the worm interacts with control servers and receives commands to execute. Its functionality is extended by downloading additional software modules and other malware. It is often used to download malware that steals financial information.