Technical Information
To ensure autorun and distribution
Infects the following executable files
- %HOMEPATH%\desktop\dotnetfx45_full_setup.exe
- %HOMEPATH%\desktop\jre-7u75-windows-i586-iftw.exe
- %HOMEPATH%\desktop\tcm851ax32.exe
Modifies file system
Creates the following files
- <SYSTEM32>\446371.exe
- <SYSTEM32>\201838.exe
- <SYSTEM32>\rcx1.tmp
- <SYSTEM32>\6541536.exe
- <SYSTEM32>\rcx2.tmp
- <SYSTEM32>\4117586.exe
- <SYSTEM32>\rcx3.tmp
Deletes the following files
- <SYSTEM32>\446371.exe
- <SYSTEM32>\201838.exe
- <SYSTEM32>\6541536.exe
- <SYSTEM32>\4117586.exe
Substitutes the following files
- <SYSTEM32>\201838.exe
- <SYSTEM32>\6541536.exe
- <SYSTEM32>\4117586.exe
Miscellaneous
Creates and executes the following
- '<SYSTEM32>\446371.exe'
