|Detected||Mar 03 2011 02:59 GMT|
|Released||Mar 03 2011 08:51 GMT|
|Published||Apr 26 2011 11:32 GMT|
This program is a Trojan. It is a Windows application (PE EXE file). It is 11 017 bytes in size. It is written in C++.
When launching, the Trojan extracts the following file from its body and saves it to the Windows system directory under the name:
This file is 5120 bytes in size. It is detected by Kaspersky Anti-Virus as Trojan-Downloader.Win32.Genome.cfbv.
Then the Trojan injects the library created into the address space of the process "explorer.exe" and launches.
The Trojan then ceases running.
If your computer does not have antivirus protection and has been infected by this malicious program, follow the instructions below to delete it:
Programs classified as Trojan-Downloader download and install new versions of malicious programs, including Trojans and AdWare, on victim computers. Once downloaded from the Internet, the programs are launched or included on a list of programs which will run automatically when the operating system boots up.
Information about the names and locations of the programs which are downloaded are in the Trojan code, or are downloaded by the Trojan from an Internet resource (usually a web page).
This type of malicious program is frequently used in the initial infection of visitors to websites which contain exploits.