|Detected||Feb 02 2004 15:23 GMT|
|Released||Feb 02 2004 15:23 GMT|
|Published||Mar 15 2007 14:48 GMT|
Once launched, the Trojan extracts the following files from itself and launches them for execution:
The Trojan also drops the following file, %WinDir%\sysini.ini, which contains the following string:
***Computer was successfully infected***
Once launched, the Trojan registers itself in the system registry:
This ensures that the Trojan will be launched each time Windows is booted on the victim machine.
If your computer does not have an up-to-date antivirus, or does not have an antivirus solution at all, follow the instructions below to delete the malicious program:
%WinDir%\svchost.exe %WinDir%\msto32.dll %WinDir%\sysini.ini
Trojan-Dropper programs are designed to secretly install malicious programs built into their code to victim computers.
This type of malicious program usually save a range of files to the victim’s drive (usually to the Windows directory, the Windows system directory, temporary directory etc.), and launches them without any notification (or with fake notification of an archive error, an outdated operating system version, etc.).
Such programs are used by hackers to: