|Detected||May 12 2010 20:02 GMT|
|Released||May 13 2010 02:39 GMT|
|Published||Sep 19 2011 12:33 GMT|
A trojan program that carries out destructive actions on the user's computer. It is a Windows application (PE-EXE file). 7710 bytes. Written in C++.
After launching, the trojan retrieves the file saved in the current user's temporary file directory "%Temp%" as
%Temp%\install_temp.bat from its body (25 bytes)The extracted file is a shell script and contains the following commands:
@echo off time 0:00 >nulThe trojan then launches the following script:
cmd.exe /c "%Temp%\install_temp.bat"The system time is changed to "0:00". The trojan then shuts down.
If your computer has not been protected with anti-virus software and has been infected with malware, you will need to take the following actions to delete this:
This type of behaviour covers malicious programs that delete, block, modify, or copy data, disrupt computer or network performance, but which cannot be classified under any of the behaviours identified above.
This classification also covers “multipurpose” Trojan programs, i.e. those that are capable of conducting several actions at once and which demonstrate several Trojan behaviours in a single program. This means they cannot be indisputably classified as having any single behaviour.