Overall risk rating:

Reported detections:

System  impact:

Information exposure:

Description:

This spyware may be downloaded from remote sites by malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.

Upon execution, its creates folders and drops components.

It then modifies the system registry to enable its automatic execution at every system startup.

It has rootkit capabilities, which enables it to hide its processes and files from the user.

It attempts to access a certain Web site to download a file that contains information on where it can download an updated copy of itself and on where it can send its stolen data. The file also contains a list of finance-related sites for the spyware to monitor.

For additional information about this threat, see:
Solution
Technical Details