Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

To get a one-glance comprehensive view of the behavior of this spyware, refer to the Behavior Diagram shown below.

Spyware Overview

This spyware may be dropped by TROJ_PAKES.AXQ.

It drops files/components. It is injected into processes running in memory.

It steals user information such as email and server passwords. It sends gathered information to a remote user using HTTP post.

It accesses Web sites to download files, one of which is detected by Trend Micro as TROJ_RENOS.VV. As a result, malicious routines of the downloaded files are exhibited on the affected system.

For additional information about this threat, see:
Solution
Technical Details

Description created: Oct 2, 2008