Windows
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Arrival Details
This Trojan arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.
Other System Modifications
This Trojan deletes the following files:
(Note: %Windows% is the Windows folder, where it usually is C:\Windows on all Windows operating system versions.)
Process Termination
This Trojan terminates the following processes if found running in the affected system's memory:
Other Details
This Trojan does the following:
NOTES:
Restore the system from backup or reinstall the operating system (OS).
Depending on the extent of the damage, and if the wiping of the MBR is unsuccessful, the system can be made bootable by doing a system repair using a Windows installer disk. If the Windows installer can still make the system boot up, recovery of the files will be futile as portions of the files were already corrupted.