Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

To get a one-glance comprehensive view of the behavior of this spyware, refer to the Behavior Diagram shown below.



Spyware Overview

This spyware may arrive as a file downloaded by JS_MULEX.C.

Upon execution it drops a copy of itself on the affected system's root folder. It then creates a registry entry to enable its automatic execution at every system startup.

This spyware gathers certain information on the affected machine. All gathered information are uploaded into an FTP address. As a result, sensitive information are exposed to unknown remote users.

For additional information about this threat, see:
Solution
Technical Details