W32/Tenga-A is a virus for Windows based systems.
W32/Tenga-A infects Windows executable files on all drives it can find other than drive A:. W32/Tenga-A also attempts to infect files on network resources.
W32/Tenga-A tries to download and run a file from a remote server. At the time of writing this file is detected as Troj/Penta-A.
W32/Tenga-A attempts to disable Windows File Protection.
W32/Tenga-A attempts to infect files at randomly chosen IP addresses via NetBIOS.
W32/Tenga-A also attempts to connect to a pre-specified server and spawn a remote command prompt that can receive further commands from a remote intruder.
If a windows executable contains appended data, W32/Tenga-A will destroy this data upon infection. In such cases disinfecton can only restore the executable part of the file. Customers are always advised, after removing a virus, to restore files from clean copies or backups.