Selected viruses, spyware, and other threats: sorted alphabetically
The trojan is being spammed by e-mail. Several different variants of messages appeared. Subject of the message may be one of the following:
The attachment is an executable of the trojan. Its filename may be one of the following:
230 dead as storm batters Europe
British Muslims Genocide
U.S. Secretary of State Condoleezza Rice has kicked German Chancellor Angela Merkel
Hugo Chavez dead
Radical Muslim drinking enemies' blood
Sadam Hussein safe and sound!
Sadam Hussein alive!
Hugo Chavez dead.
Fidel Castro dead.
When executed, the trojan drops the following files in the %system% folder:
The trojan registers itself as a system service using the following name:
The trojan can download and execute a file from the Internet. It can be controlled remotely.
The trojan might attempt to hide its presence in the system. It uses techniques common for rootkits.