Initial samples received on:
Oct 18, 2007
File size: 94,208 Bytes
This spyware may be dropped by WORM_AUTORUN.HON.
It is used to export function used by other malwares to perform their malicious routines. It is injected by the main component into various running processes on an affected system to make its detection and removal difficult.
However, it needs its main component in order to execute and perform its own routines.
Analysis by: Marfel Tiamzon