Surubat is an Internet worm that spreads by e-mail through messages with infected attachments. It can also propagate through unprotected network shares. Once executed, the parasite installs itself to the system and runs a payload. It opens a back door providing the attacker with unauthorized remote access to the compromised computer. The intruder can download and upload files, run programs and execute system commands. Surubat secretly runs on every Windows startup.