|
Description:
To get a one-glance comprehensive view of the behavior of this malware, refer to the Behavior Diagram shown below.
Malware Overview
This Trojan has received attention from independent media sources and/or other security firms.
It may be downloaded from remote sites by other malware. It may be dropped by other malware. It may be downloaded unknowingly by a user when visiting malicious Web sites.
It connects to a URL to download its configuration file. It monitors the web browser of the affected system and redirects searches in Google to the Web site found in the downloaded configuration file.
It also installs itself as an NTFS Alternate Data Stream (ADS) in a legitimate system file. This Trojan deletes itself after execution.
For additional information about this threat, see: Solution Technical Details
Description created: Jul. 3, 2009 11:43:31 AM GMT -0800
Search a new malware
Tell us how we did. Take our quick survey.
|