15 April 2009 No Comment

This Trojan has a malicious payload. It is a Windows PE EXE file. It is 23552 bytes in size.
Installation
The Trojan copies its executable file as follows:
%WinDir%\system\svhost.exe
In order to ensure that the Trojan is launched automatically when the system is rebooted, the Trojan adds a link…