Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

To get a one-glance comprehensive view of the behavior of this spyware, refer to the Behavior Diagram shown below.

Spyware Overview

This spyware may be downloaded from remote sites by other malware such as TROJ_DLOADER.ISZ. It drops a component detected by Trend Micro as TROJ_ROOTKIT.FX. It stays resident in memory by creating a certain process.

It launches a carnivore sniffer to retrieve passwords from network packets. It connects to Web sites. It deletes itself after execution.

For additional information about this threat, see:
Solution
Technical Details