Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- %ALLUSERSPROFILE%\start menu\programs\startup\desktop.ini
Infects the following executable files
- %ALLUSERSPROFILE%\application data\package cache\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\vcredist_x86.exe
- %APPDATA%\icqm\icq\dll\mailrusputnik.exe
- %APPDATA%\icqm\icq\dll\mratag.dll
Modifies file system
Modifies user data files (Trojan.Encoder).